Cars are essential to living in America except for a few cities. Car manufacturers can basically do whatever they want.
There was a recent YouTube video with a car thief that basically showcased a "special" tablet that could get any car started in a minute by plugging into the OBD port. Pretty shitty security model if it relies on no tablets getting out.
If someone's already inside the car, I expect them to be able to hotwire it eventually.
The trouble is when manufacturers extend the CAN bus out to the smart headlights or something, and it's the same bus that the body control sits on, so they can just send a door-unlock message...
Note: the technical details are very lacking so it may not be that interesting to most here. tl;dw: there is a reseller that shouldn't be selling the tablets to "unauthorized" people and some other tidbits about how the thief operates.
There was a recent YouTube video with a car thief that basically showcased a "special" tablet that could get any car started in a minute by plugging into the OBD port. Pretty shitty security model if it relies on no tablets getting out.