This is the thinking that got us:

1) the mess that is DRM, whether for software or media, and

2) to the point of 10-step windows activation (including phone calls and having to reinstall because one version only takes retail keys and another only takes oem keys and another only uses network auth), and

3) video games that try and re-authenticate between every frame of play

And tons of other "fixes" that just punish users and don't really deter bad behavior.

Software is bad enough; we shouldn't need to authenticate our exhaust system before recycling it.

How often does your average person sell scrap parts? I don't think the situations are analogous.

The gross sum of time spent tracing the origins of scrap will be greater than money lost due to theft.

The answer is mitigated risk via insurance and prevention, not a preemptive policing of all privately owned items of value.

> The gross sum of time spent tracing the origins of scrap will be greater than money lost due to theft.

I am quite skeptical that this is true.

The people that do it as a hobby/side gig probably go through 2-25 cars/yr with the people on the higher end doing more scrapping and less individual part selling.

Yes, we can always dream up some extreme case where somebody would find it onerous. How should we weigh that against a lot of people who are just trying to use their car to get to work having their catalytic converters stolen?

This isn't fixing an exploit. It's slapping a manager review on anything that gets run on the prod DB.