I'm not sure what is more disturbing here, the fact that the car had such a dangerous malfunction in the first place, the fact that there was no reliable hardware-based mechanism to bring it safely to a halt when the software failed catastrophically, or the fact that the service team could remote in and take control of the vehicle. Everything about this is not just bad in itself but betrays a more fundamental lack of safe and secure design.