And if you reconnect to get them, there’s no guarantee your car doesn’t suddenly dump all your personal data obtained in the meantime onto company servers.

It’s a good point. Also I wonder if OBD-II can do that. A person could disable the port, but that may make it hard / impossible to get the vehicle serviced.