> In its customer privacy notice, Tesla explains that if a customer agrees to share data, “your vehicle may collect the data and make it available to Tesla for analysis. This analysis helps Tesla improve its products, features, and diagnose problems quicker.” It also states that the data may include “short video clips or images”, but is not linked to a customer’s account or vehicle identification number, “and does not identify you personally”.
So it sounds like this was an opt-in data sharing option, but likely of the kind that everyone just clicks through without reading, consent but not informed consent. Unfortunately that isn't a Tesla-specific problem either, but it does seem that the reason they're not taking measures like encrypting camera data as you describe is that it was intentional that the company have access to this data - of course from there it's practically inevitable that bored employees would abuse it like this.
This is a direct and predictable result of placing cameras where people are, and then giving employees access to that footage. The solution is to encrypt all footage such that it is only accessible to the camera owners. The flaw is that the company has access to that footage at all - as has been found time and time again no amount of “controls” stops people sharing videos with each other, the only solution is for it to be impossible for any person at the company to ever access any uploaded footage, for any reason, ever.