@kentindell @nuthatch @danluu Dude. It's an updater. It should be *entirely* orthogonal to the actual function of the code being updated, unless you're daft enough to think the updater should be able to run when the vehicle is in motion.
BTW mission critical updating is a problem that has been solved, the actual point here is that the manufacturer didn't implement that, which calls the operation of their actually mission critical competence into serious question.
@alan @nuthatch @danluu Your confidence far exceeds your understanding of car electronics.