Sure, that could be a decent legal regime. Of course the first step to enabling that would be releasing the source code and system documentation for the product they've sold, so that it's possible for anyone else besides themselves to fix it. Until then it's a black box the company has chosen to retain responsibility for. And frankly regulators should be making sure they support the 20-40 years of useful life we generally expect from automobiles.