I suggest a middle road which is that the entire telemetry surface and firmware updates must be domestically managed, with no room for a closed-source foreign entity to manipulate it.

Seems fair? What about manufacturing as well, I'm sure the US can hold these Chinese car design and manufacturing techniques with the same copyright and IP protection that China gives the US's stuff.