That's a great option.
I just wonder whether that could be too annoying for Android Auto / Car Play. But to be fair wireless is an option.
The other downside I guess is that a thief would just plug a USB drive in to disable device tracking. But they could just wrap the damn thing in foil so dunno if that should matter.
It's either that, or maintain a database of trusted USB devices...which seems iffy, at best.
And by that I mean, using the database itself is simple. But when it exists, then a list of targets for an attacker to emulate also exists.
Those boys at Cellebrite aren't dummies, at all, and they've been doing this stuff for quite a long time. They're a formidable opponent.
We used to use their kit to clone personal data between very different devices back in the dumb phone days. They were the only ones to get it right out of a sea of others that were also evaluated.