Where executing an update while driving may not be safe, the manufacturer demonstrates how it will (a) ensure the vehicle cannot be driven during execution and (b) ensure the driver cannot use any function that would affect safety or the successful execution of the update (ISO 24089 7.3.4.9).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.