“The company replied by saying that its investigation determined that it was the intended behavior”
A fake “Tesla Guest” WiFi network at a Supercharger captures a password and a one-time code. With those, an attacker standing a few meters away adds a new Phone Key and drives off. The owner gets no notification in the app and no alert on the touchscreen. Tesla ruled the report out of scope, so stealing your car is now a feature.