Why is it harder to secure the cloud endpoint than the car? Is it immune to remote attacks because it lives in a data center? A CPU is a CPU. Code is code.

Having every car aggregated at one cloud system means if you got into that you could simultaneously attack every single Tesla in the world.

There is no good reason for this. It's just a mixture of "how things are done nowadays" and superstition.