It probably depends on how the exploit works. If you can OTA update a firmware that allows wireless control, that is a huge flaw. But this article doesn't real

It probably depends on how the exploit works. If you can OTA update a firmware that allows wireless control, that is a huge flaw. But this article doesn't really talk about how the exploit is triggered. This is pure speculation, but I bet it requires some physical access to install. And then the wireless control works. Why do I suspect that? Why else would the journalist have to travel all the way to St. Louis to test it. Imagine how huge the story would be if these guys disabled a car they never got within 1000 miles of over the internet. There is probably some CPU in the Navigation/Entertainment display that needs access to the CANBUS for stuff like warnings, speed, airpressures, etc. and also is connected to the UConnect thing for entertainment purposes. You can't airgap because you need the car data. So the lazy solution is to just firewall it. Make sure the CANBus controller for the entertainment system only sends data and doesn't receive any. Maybe you encrypt all data transfers on the bus for good measure. But with temp physical access you can reflash that controller to allow it to give commands it receives from the internet connected entertainment system.