Yes, but consider the dilemma: recalling or grounding hundreds of thousands of vehicles with a bug, fixing the bug and testing it for thousands of driving-hours (this will take weeks), and then patching those vehicles. Versus: making a quick fix and quietly uploading it.

Therefore, one thing I think should happen is that governments should forbid companies to upload fixes to cars directly. Instead, the uploading should be done by a government-controlled agency, and it should check that those uploads are at least X weeks/months old.