Comment by tonyarkles

Yes. https://www.psu.edu/news/campus-life/story/hackers-who-remot...

Even without vulnerabilities like that, something like https://comma.ai/openpilot could very likely be used in the same way ArduPilot was used in the recent Ukrainian drone attacks.