> I'm surprised remote unlocking is as easy as calling a number and convincing an operator that you're the owner

I've consulted on on stolen luxury vehicle cases and I can tell you this isn't unique to Tesla. If you know what to say and can say it convincingly you can locate, disable, and unlock a higher end car pretty easily.