At least with a tesla you have to manually confirm the update, and can cancel out of it for 2 minutes after doing so. If something happens between then and 15 minutes later then i guess you’re fucked, but with the amount of control you have this really should never be a problem.