It is isolated on a separate CPU for the infotainment system. However, that same system hosts the UI to configure the drive system (suspension height, range/power tradeoffs, traction control) so if you pwn the infotainment system you can attack the drive system over the car's internal Ethernet.