Like everyone else, I think the in-car navigation is done better by anyone else. Tom-toms, Garmins, or in my case, Waze on my phone.
What if the in-car entertainment system had a set of APIs that could be controlled by an external device like a phone? That external device could then have a variety of different apps that could use the APIs, even set up several competing apps to take advantage of them. If car companies write off the tiny incremental income from the people who use the services, or even offset it by having their own branded apps cost money, perhaps they could concentrate on making those APIs secure and decrease the impact of successful hacks?
A car company that was able to do that successfully would have quite a selling point to people who were in BYOD and security.