Good points, though there should be some steps manufacturers could take. They could check for unusual usage patterns, much like credit card companies do.

The article doesn't specify but does imply that, in this case, the dealer in question made more PIN requests than is normal. If so, Ford should have seen that and investigated.