[tremon]

Giving user’s control over when the update runs allows them to be in a safe and secure setting when that update happens

FTFA:

> The buggy update doesn't appear to brick the car immediately. Instead, the failure appears to occur while driving — a far more serious problem

And from the GP upthread:

> There is no way to tell if you received the bad update.

> There is no way to tell if you received the 'fix' either.

[conductr]

Good points, I did miss those. However, if I had this vehicle and I was reading this article today - and had the ability I'm asking for - I would just keep my current version running until they figure this mess out. It's the advantage of letting other people run the updates first, you get to hear about issues before you experience them.