To play devil's advocate, there is some logic to banning Chinese cars, which is that their firmware risks sending telemetry to China, also disabling/malfunctioning the car if China were to have a military engagement with the US. I suggest a middle road which is that the entire telemetry surface and firmware updates must be domestically managed, with no room for a closed-source foreign entity to manipulate it.

An EV really shouldn't be needing to send telemetry at all. It's not a self-driving car. It would be better if the user could reliably and permanently disable it even when one's phone is connected.

The vehicle would also have to be tested to ensure that no covert or p2p radio signals can be sent to it that can signal it to shutdown or malfunction. This is very difficult to assert. There would have to exist domestic personnel who take responsibility for it.

Frankly though, Israel scares me more than China, as Israel is known to actually add remotely detonated explosives to exported consumer products.