> You have to consider situations like this when discuss banning remote updating.

Isn't that exactly what we're doing? If someone pushes out a malicious change, do you know how long it would take for that change to propagate to the entire Toyota fleet?

It wouldn't.