"The fix adds HTTPS encryption to the connection from BMW to the car, which runs over the public cellular network." If they didn't even use HTTPS, how can you trust them on anything else security related?