Okay... so my 8.4 non-nav radio has two antennas. Broadcast and XM. (Which the XM antenna would probably work for GPS, too, if I had nav. Or maybe not.)
So how is this thing supposedly transmitting? And to what? I really have my doubts.
And an OTA upgrade, if it even can be received, can be transmitted as a broadcast, in batches, by commercial radio stations and get picked up randomly. (Similar to the XM disconnect commands.)
No way one of these radios is going to be able to transmit a usable handshake without an antenna attached.
If nothing else, look for a long string of numbers on a label on the radio. If it has an "IMEI" it has a cellular transmitter. If not? Doubtful. It should at least have an FCC Type Acceptance number, if it has any kind of transmitter in it.
(As for my background, I'm an FCC licensed RF tech/analyst with 40 years of experience. Currently working with encrypted wireless comm links for substations and smart meters for the power company. My point is, I think you guys are giving your radios way too much credit.)
Edit - After reading the Secure Gateway link, I'm still not convinced.
There are many of us that are using AlfaOBD to reprogram our BCMs to turn on features that we have installed (like trailer brake controllers) that we would otherwise have to pay a FCA dealer to enable. This also requires a SGW (Security Gateway) bypass module. Fair enough.
BUT... in order for anyone on the "outside" to gain access to anything, it would require either a Bluetooth dongle to be plugged into the OBD port (with the SGW bypass also installed) or for the "Wifi hotspot" in the U-Connect to be turned on. (I'm STILL not sure how that access would be made, but it's probably safe to say that if someone can connect, they can get in and look around.)
Or maybe, if your phone has been hacked, and you have it paired with your truck. But that's a whole 'nother issue altogether.
Point still is... your radio is not going to "phone home", and give away all the family secrets. It will take a concerted effort, and a measure of dumb luck, for someone to grab your data, through the u-connect. And it won't happen proactively from your end.