> What's concerning to me are reports of the car still uploading all the collected data if you attach a cell phone to the radio's bluetooth

This must be if you have the car manufacturer's app installed. I can't think of any other way for it to phone home from DCM via buetooth if the cellular module is disabled.