[alandarev]

Disconnecting will not restore corrupted firmware. Once virus is there, disconnecting just prevents data transfer.

[a3n]

Exactly. But at least you'd break the current control link and possibly/hopefully be able to stop and steer.

Maybe in addition to breaking a link on a panic stop, stopping and steering would be set to a non-commanded mode that relies less or not at all (maybe impossible with current design?) on software commands.

[maxerickson]

The malicious firmware could just omit all that stuff.

I guess the disconnect could be physical/mechanical and require physical intervention to reconnect (but cost, etc.).