They probably do it properly now, but there were stories in the past that they were able to ssh into the cars: https://news.ycombinator.com/item?id=17835760 https://www.reddit.com/r/EnoughMuskSpam/comments/99sbwa/form...
Even then you can always install an update that allows remote control.