It would be extraordinarily simple to remedy this: Require by law the technical ability to physically disable all remote communication to and from a vehicle, and prohibit any remote communication requirement from the core functions of a vehicle.

An operator should be able to use their vehicle with zero remote software use. No smartphone requirement, no onboard radio requirement. This may mean that certain features like FSD or navigation tools are disabled for safety reasons, but there are plenty of useful safety features that do not require live updates.

From a privacy and utility perspective, this is a no-brainer. Second, as a software security layperson, I think this would largely eliminate any "sleeper cyber sabotage" security concerns that are cited for prohibiting Chinese vehicles.

---

Given how obvious this seems to me, I'm confident that we're really banning Chinese EVs for economic reasons.