I'm kinda-sorta thinking about replacing my 2006 car, maybe. The last time I bought a car I definitely didn't have to worry about it spying on me :)
I'm just familiar with the data collection and the flow of data to insurance companies for JDM cars. A quick look at an EFF article and you should probably also avoid every car manufacturer.
Toyota Motor Insurance Services, Inc. (TMIS) collects the data from Subaru, Mazda, and Toyota. I don't believe Honda does, looks like they go through a different data broker. TMIS also gives the data to other companies that create metrics and ML models for insurance companies.
I agree with you that the law is the right way to address these issues, but until then I'm on my own.
On the other hand the 3G system shutdown might help this issue.
That's pretty much my backup plan for when the day comes that even used cars include this stuff. But until then, it's easier for me to stick with used cars that don't require modification.