I would agree. Yes that could be done. That is a bluetooth vulnerability. And I wouldn’t be surprised if the clowns have ways of extending that range far beyond the nominal 35 feet.
My 2016 GMC allows for a WiFi hotspot with subscription to On-Star. Even more fookaree can be had with that.
Again, it links back to the motherboard that commands EVERYTHING in the vehicle.
The in vehicle device range is the limited footage, the ability to access it and deliver a command is probably unlimited. The systems probably have a universal default access password (that probably everyone interested in hacking knows).
If you have telemetry on the vehicle, it’s been demonstrated amongst some already that commands like “activate ABS left front wheel” can be issued and unless you’re at the top of your driving game you’re going to wreck.
There is no reason why you couldn’t access the phone through the wireless network and direct it to send Bluetooth commands to the vehicle. Theoretically.