"would get caught in a power hungry endless loop while disconnecting the drive pack and completely draining the 12V battery, bricking the car. To get the car functioning again required a trip to the shop and a software update which was costing GM lots of money for the warranty work."

GM should bring in some formal methods people and come up with a sound design, property tested with tlaplus or some moral equivalent.

Whole comment / thread is pretty interesting!