How do cars do in out-of-sample crash testing?