Is that true though? I mean, in my mind OTA makes it a given that the firmware is going to be fully signed and the channel will be fully authenticated. Wherea

Is that true though? I mean, in my mind OTA makes it a given that the firmware is going to be fully signed and the channel will be fully authenticated. Whereas if a dealer is installing it, they could dismiss concerns with "we trust our service technicians." Seems the latter opens the door to a lot of social engineering possibilities. But I was responding to a claim of the update being "poorly tested", not insecure. That's orthogonal to it being over the air. A poorly tested update delivered through a service center can also brick your car.