>>and you can just steal all the cars from the brand without it being obvious that you’re doing anything wrong
I don't see any indication here that's the case - opening the doors is very different than being able to start the engine and drive off.
From the last paragraph:
At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.
In modern vehicles with remote start, "starting the engine" leaves the immobilizer engaged.
If you have a car with factory remote start, try this yourself -- try remote starting the car, then getting in without the keys and driving away. You can't.
well you clearly didn't read the article...
> At the end of the day, with both writeups combined, we could send remote commands such as unlocking and turning the engines on, for any of the automaker's vehicles in Australia, the United States, and Canada.