There seem like so many ways to make this more secure than a public-but-hard-to-guess URL. Am I missing them? Does anyone have ideas on why it's a bad idea to for example require a login?

Edit: just want to append that this is really neat! I don't think it's dumb at all but my knee-jerk reaction was "aaah somehow this will turn into someone hacking cars that aren't theirs"