Attacking AI based systems with malicious input is like shooting fish in a barrel. Combine high complexity with low comprehension of how the internals of the system actually work and you have a field day for security researchers.
It’s only a matter of time before someone hurts or robs a Tesla driver by forcing the car to do something that’s not in the best interest of the operator.