Old news - for 20+ years in Europe, 5-10 years in the US, and now in Korean and Japanese cars too, ECM updates have been cryptographically signed for warranty, emissions, and now EU cybersecurity regulatory compliance. It turns out there are still bugs in things with cryptography too though.