If this hacking involves anything dangerous such as uncontrollable acceleration or something like that, the companies will create extremely secure software, and the government will make massive enforcement efforts and severe punishments for this.
Well considering onstar is an unsecured link I'm not really surprised. Plus anything that allows phone access to your vehicle none of these are secure.