I think to remember to have read something about the possibility for a car manufacturer to remotely disable the car if requested or defaulted, something like once you park the car and turn off the engine it will not start again so no security problem, but I cannot pinpoing when/where i read it or if it ever went beyond the stage of an idea.

Every phone is going to get the code that does this - paid off or not.