> how are we to be confident that its safe?
I hope you realize that these companies dont just push updates to your car like vscode does.
Every change has to be unit tested, integration tested, tested in simulation, driven on a multiple cars on an internal fleet (in multiple countries) for multiple days/weeks, then is sent out in waves, then finally, once a bunch of metrics/feedback comes back, they start sending it out wider.
Admittedly you pretty much have to just trust that the above catches most egregious issues, but there will always be unknown unknowns that will be hard to account for, even with all that. Either that or legitimately willful negligence, in which case, yes they should be held accountable.
These aren't scrappy startups pushing fast and breaking things, there is an actual process to this.