In the end we are in cat & mouse situation
Vulnerability found > hacker cracked it > car company figure it out > vulnerability get patched
It’s same issues with John Deere tractor, from what i heard many farmer hire bunch of hacker to crack the software