Couldn't they have just mandated that Polestar cars in the US must not be able to connect to the internet? That would pretty much negate any potential foreign threat related to "connected cars". Just make them... not connected.
Internet built into a car is just another unnecessary subscription.