I recently was working on highly connected autonomous public transportation. Can confirm that connectivity is only increasing, and that cloud connectivity is going to be a hard requirement in the future.
As for security, while the automotive manufacturers are aware of dangers, and standards like ISO21434 https://www.iso.org/standard/70918.html are driving them towards better security engineering practices, there is a huge gulf between process/compliance/governance, and truly secure engineering practices as a core part of engineering culture.
Many/most of the people working on the on-board systems come from an embedded development background that doesn't include pervasive connectivity. That's a problem. They might check the boxes to appear secure, but they aren't necessarily invested in the process.
My prediction; there _is_ going to be a severe and widespread automotive security event which cannot be ignored, before that culture shifts.
As for security, while the automotive manufacturers are aware of dangers, and standards like ISO21434 https://www.iso.org/standard/70918.html are driving them towards better security engineering practices, there is a huge gulf between process/compliance/governance, and truly secure engineering practices as a core part of engineering culture.
Many/most of the people working on the on-board systems come from an embedded development background that doesn't include pervasive connectivity. That's a problem. They might check the boxes to appear secure, but they aren't necessarily invested in the process.
My prediction; there _is_ going to be a severe and widespread automotive security event which cannot be ignored, before that culture shifts.