I like you got out of the good/bad AI scheme.
However I'm not convinced by the third option. What about a fourth one, like the one Google does in its Pixel phones: an embedded AI.
A specialised generic AI built by a trustable car maker supplier, that analyse your personal data on board, without revealing it, and that would personalize the car?
Not being a specialist I'd like to know your thought about it.