The issue is there are zero laws controling data collection. Online or from cars. And no ability to opt out. No practical ability at least.
Security design imposes reduction of all potential sources of failure to the essential required for function...