Not just electric vehicles, but any vehicle that's connected:
this article demonstrates part of my issue with the connected world and the types of data car manufacturers have on its customers. It's too pervasive IMO; if I did have a "connected" vehicle I would be trying to work out how to disable that. Call me paranoid but it is the reality we live in. Just consider what sensors connected cars have in them..microphones, cameras, location, attention detection, speed etc and something you've done in the privacy of your car or near your car and if you'd be comfortable with some unknown entity being able to access that. Or in the case of an abusive partner/ex/boss, what apps could they install on the car - engine kill, video, location, audio. The list is only limited by imagination.
[snippet]Curry and Shah reported their findings to Subaru in late November, and Subaru quickly patched its Starlink security flaws. But the researchers warn that the Subaru web vulnerabilities are just the latest in a long series of similar web-based flaws they and other security researchers working with them have found that have affected well over a dozen carmakers, including Acura, Genesis, Honda, Hyundai, Infiniti, Kia, Toyota, and many others. There’s little doubt, they say, that similarly serious hackable bugs exist in other auto companies' web tools that have yet to be discovered.
In Subaru's case, in particular, they also point out that their discovery hints at how pervasively those with access to Subaru's portal can track its customers' movements, a privacy issue that will last far longer than the web vulnerabilities that exposed it. “The thing is, even though this is patched, this functionality is still going to exist for Subaru employees,” Curry says. “It's just normal functionality that an employee can pull up a year's worth of your location history.”
[/snippet]
link: https://www.wired.com/story/subaru-location-tracking-vulnerabilities/
note, video and audio footage is available via the Tesla website, this means that that data is uploaded and Tesla and others should be included in the above list.
note, BYD appears to enable automatic app installation via USB disk - all someone has to do is have access to your car
