Do the car manufacturers themselves also need to abuse a vulnerability to access this data that normally only the car owner has access to? Or can we trust our benevolent corporate overlords to keep this data safe on our behalf, and not abuse it, so long as "hackers" don't get it?