Cars should not be connected to internet, period. If you want some component to be able to be part of the car and connected, it should be hardware that is physically not linked to the car system itself in any way.
And you should not be able to issue OTA without some manual hardware operation, like turning a key somewhere that is far from the wheel.