Infotainment isn't well isolated from the more important parts of the car which use the same bus.

For example I recall reading there was an example of a car which wouldn't trigger collision avoidance during a phone call because it was erroneously triggering the breaks to a very small degree and the logic was not to trigger the breaks when the user was already braking.

There is every reason to believe security is as mediocre on cars as elsewhere.