I consider OTA updates to be of negative value, actually. If my car needs fixing, I'll bring it in for servicing. If it's not broken, I don't want my car tampered with.

Come back to me when there's a punitive liability model for OTA updates. If the garage manages to break something during, that's on the garage, not me. It should be the same for OTA updates: the company pushing the update should be liable for any failure and for providing replacement transportation if they manage to break my car with an update.