I mean there was this CCC [0] talk two years ago where they managed to get access to the poorly secured location data of all the cars, including historic movement patterns.

[0] https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...