Yes, and I think we should protect users from automatic updates.

An AV company should only be able to update the car software after that software has correctly driven for X million miles.

Perhaps a separate agency should perform the actual updating (installing of the new software), so we can be certain that no "quick fixes" are happening behind the scenes.