I recall another pilot acquaintance of mine (Northwest) describing either a re-currency or maybe it was an upgrade (from a Boeing to an Airbus IIRR) check flight in a sim, where the sim operator threw just about everything at them. IIRR, during a cat. 3 approach in strong gusty cross-winds the operator set one engine afire, which they shut down. Not content with that, he set the other one on fire as well, and they had to re-start the first before shutting that one down; ISTR there were also some control and comm issues, but they got the thing safely on the ground, although he said the cleaning crew probably needed a bucket and mop to deal with all the sweat on the floor. Maybe that's what's needed, a Tesla autopilot sim, with qualification on that before you can use various features in the real world. In the meantime, major restrictions on when/where it can be used are needed, at least until it has the capability (Level 3 or higher) to be safely called an autopilot.
Every professional pilot has had that type of session (we did it in ATC, too). It's mostly for fun, after you've already met the training threshold.
Everybody did Captain Sully's dual engine failure off LaGuardia shortly after that happened. I think I did a dual engine fire into Aspen (no likely go-around with mountains) on my last sim... after the official checkride was done. I've also done aileron rolls, cuban eights, hamerheads, etc. What does that prove?
I've also done Cat II certification, which is a real checkout. Nothing like that is remotely required for a car.
1) I would have a internet based optional training program
2) I would disable the autopilot on non-divided roads
3) I would adopt the "eyeball open" technology that companies like Mercedes use (the B-Class ED has this)
4) I would disable autopilot in limited visibility
5) I'm sure there are other limitations I would use