Why would they be, anymore than for the original product?
Also, do you have a single example where there was a security vulnerability in the update mechanism of a car that resulted in an attack? Do you have a single example of a loss caused by an update (that would not also occur during offline servicing)?