Yes! If we can some how access the debug interface like JTAG or UART, then it is possible to add backdoors to the firmware. Even if the debug interface is protected, there are methods like side channel attacks or fault injection attacks that can set a certain bit to enable the debug interface. If a hacker could access the car's Over-the-air software updates server, then its pretty much over for the car company.