If Tesla employees can address individual cars with no oversight or audit trail or "2+ man rule" in place, that's a huge lapse of professional responsibility.

We need something like Certificate Transparency to log ACL hits for all these "connected, but proprietary" things in our lives.

Do we have any guarantees a rogue tesla employee can't just tell your car to drive off a bridge while you're inside it?