There was already a million vehicle recall for a vulnerability that allowed remote control of safety features (steering/breaking/acceleration control) that could be abused by anyone with a sprint mobile sim.

https://static.nhtsa.gov/odi/rcl/2015/RCRIT-15V461-4869.pdf