I've pushed OTA updates to smartphones before: there is a rigorous certification process that the software has to go through before reaching the customers. We've had times where we had to push emergency OTAs soon after, but never a time where we had to do any sort of recall due to an OTA.

I'm certain that these vendors don't have nearly the same amount of checks compared to smartphones due to much less overhead (like we had from carriers, Google, SoCs), but it's still astonishing how this could happen, but it's a good lesson for them, mistakes happen and I hope they implement a system where this is not possible to happen again.