This is actually pretty common and for the most part the updates are signed and require user action to install. Now, of course, the signature checking is usually broken, because it's automotive stuff, but it is there :)