Is there an option to physically disable this?

When i finally get an EV I don't want it to be online in any form, is it even possible to get one like that?

Install the latest update and hope for the best.

Or try disabling bluetooth.

Or try to get a car without autonomous parking.

Seems like there is no real option though.

Wow, super impressive. Now we need a live video feed from some forward facing camera to give some FPV perspective and a gamepad. And with some more clever hacks, the Leaf could become something like a Mars rover.

...a semi-autonomous vehicle surveying a dead landscape?

These would be better robo taxis

It is not just EVs, this can be done on almost every new car in some form or another.

The thing that pisses me off most is that cars have these vulnerabilities, and automakers do a shit job of protecting them, but do just a good enough job to keep me, the owner, from playing with them.

Sure. It could do your summer vacation including those nasty traffic jams without your participation. Send back a few pictures from important landmarks and monuments, all the while you sit in front of your computer in your air conditioned home like the hacker in the video. Dead landscape might be another option. I'm not sure how the processing power of a Nissan compares to a Mars rover Maybe it needs to drive very slow to be able to keep up with the incoming sensor data, or due to delay...

"Take my [family], please"

You're a genius. I hadn't even thought about that...

Install the latest update and hope for the best.

The addiction is also the cure.

Get a used moderately old petrol car and do an EV motor swap into it.

thats a premium feature.

That's what our economy has become. Sad.

I want the new technology but it has to work like the old, and I can answer myself: Okay boomer!

I'll have to find a compromise when I finally get an EV.

How can an attacker control the steering?

Bluetooth -> infotainment system -> CANBUS -> Lane Assist or adaptive steering

Die infotainment system should not have this permission, but it does.

The loophole is the connected smartphone from the driver. An attacker could deauthenticate it and mimic the car app.

Get an old leaf with a new battery?

Somebody did something similar for a Jeep like a decade ago... but somehow people still expect the results to be different now.