The govt should fund $1,000,000 bug bounties on these vehicles. If anyone succeeds in remotely gaining access to the mic, car companies are fined $100,000,000.
Even attempting responsible disclosure on vulnerabilities when it comes to cars can quickly result in a gag order.
[Citation needed, but not hard to google, been discussed here before]