[ballenf]

I can't wait for the day that anyone with the right credentials can remotely disable/track/summon your car.

Despite the tradeoffs, I think our current approach is better than the alternatives.

[rpozarickij]

Credentials don't have to leave the car and they can still enhance security quite significantly.

For example Face ID in iPhones works pretty well, and your face data is stored on the phone only.