True for more reasons than software. The critical control systems (anything that can screw up the driver’s control of the car) should probably run on a CPU that is hardened against single event upsets and similar faults. No amount of microkernel magic can replace that.