My car’s head unit runs that QNX thing. The firmware is authenticated with a few 512-bit RSA keys, easily cracked. The applications were written as flash and Java applets. This car isn’t 5 years old.