From what we know, they do. The car actually VPNs into Tesla HQ to download updates. As such, we don't know what happens after that, but the fact that they've gone to the level of setting up a Car<->Manufacturer VPN suggests that they do more beyond that.