There is:

a) Zero trust in the car manufacturers to really respect GDPR

b) Zero repercussions for actually stealing my PII. Okay, maybe VW will pay a minuscule fine, but they won't