>History shows that car manufacturers have not given near enough thought to the security of access to a vehicle

Yeah! No kidding!

I read last year about how Nissan's Leaf API was entirely unauthenticated, all you needed was the VIN to mess with people's climate control.

https://www.troyhunt.com/controlling-vehicle-features-of-nis...