In my view, all they really need is to allow read-only data display through the OBD2, or via an authenticated web portal assuming the manufacturer has the data already. If you remove the wireless part of it (which the law doesn't say you mush access it wirelessly), then the remote operation is a non-issue.

Really seems like a lot of fuss about stuff that has plenty of possible options. I might even call it FUD or a miscommunication it's so sloppy.

Personally, I don't want a car sending data to anyone. I disconnected OnStar in the one vehicle that had it. Pretty simple to remove the bridge between the cell board and the rest of the electronics.