Similar Conclusion
I've slowly been coming to a similar conclusion: that buying a China-built electric car - or at least one where the electronics and software is supplied and maintained by a Chinese company - represents a very high risk. That's not related to going onto particular establishments or into sensitive areas in my case but that, after a war breaks out, the first thing I expect China to do is to cripple our transport systems, utilities, communications and any public infrastructure they can get to. That would include private motor vehicles being remotely disabled (or a sleeper process disabling it at a set time, after being 'armed').
It's tempting to suggest we should insist that, in order for critical China-built systems (including vehicles) to be sold in our domestic markets, the company must supply all source code. But, of course, there are a myriad number of ways that a remote-disable capability could be hidden outside visible source code.
Perhaps the government (of whatever Western nation you're in) should impose a 'risk premium' - in the form of an import duty - on China-built systems (including vehicles) to account for the probability and consequence of eventual espionage and/or disruption. But that'll never fly. The vast majority like their cheap goods, never properly evaluate risk and love to blame the messenger. And then there'd be the diplomatic fallout and economic retaliation from China.
Still, either you manage the risk or you leave yourself (i.e. much of the country) vulnerable.
Oh, and I pointed out some of these risks about eight or so years ago when I worked in a related field. Eight years is actually pretty good for a government response, even half-baked. Sigh.
