I recall a post somewhere where someone claimed that attempts to hack his Tesla resulted in a message about unauthorized access being detected with the threat of his mobile connection being severed if it recurred. My guess that there is a IDS was based on that.