Vehicles has been identified as high cyber threat risks for a long time, with a series of high profile attacks on infotainment systems about 10 years ago (largely university projects exposing holes)
Introduced in 2021 for new vehicles and mandated 2024 for all there have been some incredibly strict rules that have been implemented regrading Cyber security on vehicles, on the connected services and the management of over the air updates. These require the OEM and each car to undergo rigorous testing, threat monitoring, mandated updates and also ensuring new software packs don't create new risks. (Same rules that mean the OEM have to declare the contents of the over the air update)
They are generically referred to as Reg 155/156 if you want to do some web searches.
Clearly never say never, but lots of these Fridge attacks are old systems with no active cyber management but no one considered that they would be attacked.