Indeed, just another attack vector.I certainly don't mind data being used to ultimately create a better product. If it can alert at a diagnostic level, then even better. I also think that sending the GPS coordinates will ultimately be more useful if the car was ever stolen.
However, it worries me slightly that the system allows for 2 way communication. In theory, Kia most likely have remote access to SSH into the central systems in the car.