The two things in the headline are not at all related. Car manufacturers just see an opportunity to dip into the data market to make even more money and an opportunity to sell subscriptions. None of that is about keeping people safe.
I’ll stick to my old 2007 shitbox. Until I can block sending all data from a new vehicle to someone else’s servers I just can’t justify buying a new vehicle.
Obviously the keys could be stored more securely, but if you’ve got malware on your machine that can exploit this you’ve already got bigger problems.