If you can call for a driverless Taxii then there is some level of remote access. So, it's going to be a concern in either case. However, you can set the car to dial out when it's confused rather than waiting for remote connections which reduces the attack surface.