Who's to say malicious people DON'T already have the codes? Clearly Volkswagen and the court believe they do not.
I agree that a perpetual ban is not acceptable in this case. Industry should have to fix the situation and the keys should not be predictable from this hardware.