a) interesting, because it shows how other companies solve (or fail to solve) specific common problems.

b) surprising, because I thought they'd be much better at it.

Car infotainment is generally not categorized as safety-critical and can be quite similar to regular software development. Having remote access changes things: I always thought their security must be top notch if they had the confidence to launch that. Ssh-ing and deleting files sounds like the opposite of that.

Btw, saying that doing things properly increases risk must be the biggest load of nonsense I have ever seen on HN.