It’s less interesting to me who is registered as responsible, or what process is used to select that person. But if no specific single named individual is registered as personally liable without possibility of corporate liability shield, then we won’t get public acceptance of self-driving cars for a much longer time than could be possible.

This seems obviously wrong to me. What is your reasoning here?

suppose you get framed by having a vulnerability in your vehicle getting exploited

If, as the registered person, you were notified about the vulnerability and didn’t patch it, you could be convicted of criminal neglect at minimum, same as a driver who ignores a recall notice and continued driving.