A growing chorus of advocates and politicians say automakers aren't doing enough to protect consumer data from companies, criminals or even the government.