That's fine. I don't care who's driving the car carrying the camera. I care about what the camera can see. If you've ever been sent an Amber alert for a local child abduction it often comes with a description of the car that the suspect is driving. If I'm in law enforcement I'd much rather get an emergency warrant to ask Tesla to query the network to find that kind of car in a given geographic area.
The future is here, and computers will see everything in excruciating detail via multiple planes of information. The power you consume, the data you send, the money you spend, the media you watch, the words you write, where you go.
It’s all out there in the world. There’s no taking it back, though we may be able to legislate about its use.
It's trivial to identify the car. You can see the reflections of the plates at times. If that was removed, you'd still have the ability to cross-check it with traffic cameras (or business cameras).
You can't say "You can query for anything!" and have it be anonymized.
In fact, if you're taking a camera shot, that's the most broadband sensor imaginable, and no thanks, I don't trust any company with profit motive not to crumble and pop out a software update to selectively disable picture blurrers, or to not have a Boolean flag in your data scrubber.
As a company, making that statement is just trying to slip one past and hope nobody asks inconvenient questions about it.
Every law enforcement entity on the planet: drool