Just enable it by default and put a warning in big red letters that disabling the cellular modem will also disable the ECall system, which may mean you might not get the emergency assistance you need and therefore die.

That shouldn't have to be linked. You should be able to turn off manufacturer telemetry while keeping ecall. Ecall doesn't even talk to the manufacturer. It just calls the emergency services directly.

Of course when the modem is on you can't be sure that it's not doing that but that's what we have laws for.

Yes and no. Ecall is but telemetry is not. And ecall only makes a call in case of a crash.

The GSM SIM cards, by design, can be remotely updated to do whatever the service provider wants (or asked "nicely", or paid to do).

https://www.thalesgroup.com/en/markets/digital-identity-and-...

I know, and they can be hacked too through sms messages.

But the sim card doesn't have access to the car telemetry. Probably even the whole baseband module doesn't. It just gets that data to transmit when an accident happens.

The worst you could do by hacking the SIM is to make the modem send nearby cell data somewhere. Which is serious enough because the rough location can be derived from it. But it's a far cry from what these manufacturers collect.

Or if the service provider is served a warrant, or if they're hacked.

Ecall could/should use completely separate communications infrastructure than the entertainment/vehicle connectivity functionality.

That's difficult because both will need to use the cell network.

But I guess you mean on the car side like two modems? Yeah that would be nice, or at least to mandate the option to turn all manufacturer telemetry completely off. The EU never bothered to do this for computers and phones either though.

In Spain they soon will require V-16 [0] too. Originally it was just a light but then it was improved to use mobile networks to send an emergency call to authorities. And proving, that technically, it is possible to have something like ECall but without deep integration into the car.

No need of having always on connection to the network, only enable on emergencies. No remote hacking of SIM/base band possible at random times. Mechanic or user can check battery periodically, replace if low, just like wiper fluid. Car could even cut all electric systems after deploying the integrated V-16 system.

Car manufacturers deciding to make their ECall implementations complex and privacy invading was their choice.

[0] https://en.wikipedia.org/wiki/V16_warning_beacon_lights

This uses the LTE-M network, which is pretty cool. It doesn't do anything until you turn it on.

AFAIK ECall uses a voice call with data encoded on the audio channel. This is not what telemetry does, it should be doable to leave the voice channel and disable any data connections. (But it's probably very hard to check for someone who has no background in emebedded systems). Plus, in theory an emergency call can be done without even using a SIM card, right (if network allows)?