> The former is still strictly safer.
I find this to be an absolutely ridiculous statement. Software as we know it today is incredibly brittle. What will eventually be put on the road as fully autonomous vehicular control software will have been HEAVILY QA'ed, and will be continuously QAed by telemetry. Random people modifying that software invalidate any proof-of-safety from the upstream QA and monitoring processes.