From what I've seen, in multiple industries (but not automotive), pretty much anyone serious about signing firmware holds the keys in a HSM.

When you factor the total impact of firmware signing on the product lifecycle, a HSM is a drop in a bucket...