Also, the story seems to have been that the "cheat" was a special mode explicitly programmed for test purposes and not something totally under the covers. The "crime" was in enabling that mode under field conditions. That change may not be covered by source code revision control, if it were made in a config file outside of SCC.
In a field more of us here understand, it would be similar to coding a feature in a server that dumps user passwords to the log file in plain text. Such a feature would be useful for certain debugging situations, but it would be disastrous to have it enabled on a production box. So you'd put a big all-caps warning in the source code, documentation, example config files saying whatever you do don't turn this on in production. Supposedly the engine management developers did something along those lines, but the folks who built the cars ignored the warning and enabled the mode anyway.