>>and you can just steal all the cars from the brand without it being obvious that you’re doing anything wrong

I don't see any indication here that's the case - opening the doors is very different than being able to start the engine and drive off.

well you clearly didn't read the article...

> At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.

From the last paragraph:

At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.

In modern vehicles with remote start, "starting the engine" leaves the immobilizer engaged.

If you have a car with factory remote start, try this yourself -- try remote starting the car, then getting in without the keys and driving away. You can't.

Many cars use loose tolerance wafer locks[1] which are vulnerable to "raking". Picking a lock involves setting each tumbler individually by feel, and requires significant skill. Raking, on the other hand, is basically just rapidly jiggling a bumpy stick in the lock until all the tumblers bounce around enough to get caught on the edge of the cylinder and the lock opens. It's fairly low-skill, and can be quick enough that it looks almost like using a key[2]. (picking for comparison [3])

[1]: https://en.wikipedia.org/wiki/Wafer_tumbler_lock

[2]: https://www.youtube.com/watch?v=oztjRNKKTwE

[3]: https://www.youtube.com/watch?v=g0c1UAeuKlw