Pretty sure in this scenario they'd have to recall them all anyways, because regulators and the public would not trust hackers to accurately log and report every bolt they messed with.