> Functionally - I don't see much difference between a misbehaving control module and a driver having a stroke.

We have total control over not installing aftermarket safety critical software, which may or may not allow a driver to break.