The 2017-2020 Mazda CX-5 stays as the non-Toyota crossover pick, but only as a non-turbo recommendation. It is practical, widely available, and in the U.S. model window before Mazda Connected Services applied to CX-5. Mazda’s Connected Service manual lists U.S. CX-5 target models starting with 2021.
Treat 2021+ differently unless the TCU status is verified and deactivated. Mazda’s current Connected Services privacy page says customers can request TCU deactivation, and Mazda’s availability chart says customer-requested TCU deactivation means no data transmission / data line closed. That is a lower-assurance option than buying a pre-connected car, but it is real enough to document.
Avoid the 2019-2020 CX-5 2.5T unless the cylinder-head/coolant-leak history is understood and covered. Mazda/NHTSA service material for 2019-2020 CX-5 2.5T vehicles describes coolant leaks at the cylinder head and a modified repair path. For this directory, the solid pick is the naturally aspirated 2.5L car. As with the Mazda3, still run the VIN, inspect for aftermarket trackers, reset infotainment data, remove paired phones, and clear prior-owner app access.