"remote"? No. I want my driver-assistance ECU to be air-gapped but fully reprogrammable locally. After all, even with a totally tivoized ECU, a physically present attacker could still make my car kill me by cutting my brake lines.

> Open source === RCEs/vulnerabilities

Welcome back 2005 bill gates

When it open source, it can be patched to fix RCE. Binary blobs are much harder to patch, so just buy a brand new car with brand new RCE.