My newer EV that came with LTE connectivity will also fully work without network connectivity, except for the apps and remote updates. You can turn off the built-in cell connectivity via the head unit menus, and if you're especially paranoid, you can pull the fuse on the modem (and I've done it!). When it doesn't have a network connection it too operates just like a normal car.
There's a lot of fear around EVs being "software on wheels" based on a few manufacturers making non-remote features that depend on remote connectivity and botching updates or requiring subscriptions, and I agree that all is super problematic both from a privacy perspective and point-of-failure reason. But there's absolutely nothing intrinsic to the core design of EVs that demands that they're connected to the network.
Okay, nobody is putting in a placebo sim, but in software, we DO have placebo controls. If you flip a switch saying "don't track me", that usually means "track me slightly less". If you delete something, that doesn't mean delete it - that means keep it, but say it's deleted.
If you go through the Windows install, for instance, even if you flip off all the stuff it will tell you "we're still going to do this, just in less circumstances".
What are those circumstances? I don't know. I'm not even sure Microsoft knows.
It is everyone's information that they value, not that one guy who goes to the trouble of killing the radio.
Given that, I hardly think that 'decoy sims' are much of a stretch.
The only reason a decoy sim is going a bit far to believe, is because it wouldn't actually work. It wouldn't actually fool anyone and would just look bad when the first reviewer pointed it out a year before the car is even available for sale. If it weren't for that, we already have countless example proofs that a company will do literally anything if it will work merely 1% more than whatever it costs. Including car makers obfuscating and even flat out lying about their various connections.
What do they get out of it? data & control, same as ever.
Cars should be independent, local only devices. Having cloud dependencies is just reckless and stupid.
You can filter for all the frequencies that show up regularly, then you differentiate by signal strength - group occurrences of the same frequency into similar dB buckets, then correlate the changes based on new fixed positions within the car, and run some calculations on changes in signal strength to obtain a dB to distance calculation. The strength to distance calculation can be estimated by making some assumptions about the type of radio you're looking for - a simple cellular module is going to be different than a WiFi repeater, or a wireless fob, or a bluetooth tracker.
From the fixed points within your car, you can tie one end of a piece of yarn to where the sensor was affixed, and the length of the yarn should correlate to your dB to distance estimate for that position, and with 2-3 or even 4-5 threads you'd be able to group their loose ends together to get a rough physical indication of exactly where the radio transmission is coming from.
The grouping won't be exact, but it'll literally point in the right direction, and if the threads are too long, or pointing to something buried in the chassis or whatnot, then you can reduce the lengths of your yarns by the same percentage of reduction and they'll be "pointing" at wherever the radio source is.
You're going to get a general location, like "under the dashboard" or "in the glovebox" or "somewhere under the spare in the trunk", not a millimeter precise location. You could probably vibecode a way of processing the data in a browser, and use a bunch of splats and AI modeling of your car and so forth to get a very precise and useful pinpoint of a device with a fancy UI, but you can just use a spreadsheet and text files of logged signal records, the process isn't super difficult.
I no longer receive updates to the infotainment system and I can't unlock the doors with my phone, but I also don't have the dealer emailing me service ads with my exact current mileage and tire pressure.
(one of those things I've seen very little discussion of, the WP page correctly points out that this mandates a mobile-station in every car; although it does not precisely mandate that it be always-on, in practice it will be in order to manage messaging promptly)
In the past they handled the call without that information, but after an incident in 2013 the court ruled that the requirements also must be fulfilled without a SIM (0).
So some carriers (notably all German ones) stopped accepting Emergency calls without SIM, first to not be in violation of the law but nowadays apparently due to "misuse" (?) (1).
(0) https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
(1) https://www.heise.de/en/background/112-Emergency-Call-Day-No...
I have no words that would not end up in things that might necessity calling 112...
I really don't get this insane need to track everything. The computers in cars should be pull data, never push.
I wonder if, now that China has a developed supply ecosystem, it's becoming possible to build a car with lots of commodity/white-label parts. And I wonder if, as the quality of this supply chain improves, that means we'll start to see more small players emerge?
(Pure speculation)
Cameras reading numbers plates at multiple locations -including speed! - is one thing.
Noting your : location, speed, direction in subsecond increments, your climate control preferences, what songs/eBook you are listening to, your face imagery (thanks sleep alert camera) and listening to your conversations... this is a whole other level of possible privacy invasion.
Is all of the above being tracked? I could imagine much of that is unwieldy, or not that useful, data. But how can you know whether a company is taking this data or not without first being suspicious? And if you are suspicious at this level, then what could a company say to convince you they are above board, and only using your data to your benefit.
I respect your choice, but do you walk the walk - don't carry a phone, no bluetooth devices, built your own router, run no javascript on your browser, etc, etc, etc.