Seems someone doesn’t understand how OAuth works. It does not automatically give full access to your social media accounts, location history, and device cameras as the video says.
Using the Google button for instance will tell you exactly what permissions are being requested every time you login. Generally, it will be name, email, language, and sometimes profile picture. Aside from the profile picture you would give all the same information anyway to create an account. At least with OAuth there is no worry about passwords, especially for people who don’t have good password practices and reuse passwords between different sites.
Most likely with an impact that severe, the passengers were either killed or incapacitated on impact, especially giving the fact none of the others were noticed trying to escape when the bystander broke out a window.
The front doors do have easily accessible manual releases on all of the models.
That being said, for the ones ‘equipped’ with the emergency feature for the rear, it is a manual release cable buried under the speaker grill, which is something very few passengers would know about in the first place, much less have the presence of mind or physical capability to remove the speaker grill and find/pull the cable.