There's no need for regular updates. Fix problems the way they're normally fixed, and other than that, don't update anything.
As opposed to my car getting an OTA update overnight and the only thing I notice is the reversing beep is now a slightly different tone.
That's progress to me.
I disagree, cars should be fully updated OTA. It's cheaper than a recall and easier for the consumer. New features increase the longevity of the car.
Also, do you have a single example where there was a security vulnerability in the update mechanism of a car that resulted in an attack? Do you have a single example of a loss caused by an update (that would not also occur during offline servicing)?