Bluetooth keys work but not all Tesla cars have those. Some cars unlock by phone via the app through an internet connection, it seems.
I'm surprised remote unlocking is as easy as calling a number and convincing an operator that you're the owner. Another reason to avoid the brand, I suppose.
Couldn't they just claim that "someone stole your identity" because that seems to works for banks and similar institutions?
I've consulted on on stolen luxury vehicle cases and I can tell you this isn't unique to Tesla. If you know what to say and can say it convincingly you can locate, disable, and unlock a higher end car pretty easily.
You probably want to avoid cars altogether if this bothers you. For basically all cars, there are far easier and less time consuming methods to unlock the doors.
The problem that happened last time was that people opened the app to do something and logged out to try and fix it, thus clearing their credentials, and then can't log back in, and cant log back in to reauthenticate their device.
They should add some friction to the logout process. Like a server API call to allow you to logout.
But everything needs cloud! I mean you can't unlock something three feet away without sending some packets over 2000 miles round trip.