Which I think is symptomatic of the bigger issue. Car companies look at anything that goes into a car as a physical part, and they've gotten extraordinarily efficient (through ruthless competition) at process for dealing with physical parts.

Except... anything that contains code has orders of magnitude more test dimensions than a typical physical part.

I would probably stop driving altogether if I knew exact figures on how many auto manufacturers even have in-house test coverage of their outsourced ECU / microcontrollers.