In the end we are in cat & mouse situation
Vulnerability found > hacker cracked it > car company figure it out > vulnerability get patched
It's same issues with John Deere tractor, from what i heard many farmer hire bunch of hacker to crack the software
you're paying for a backend service and a constant internet connection for your car here though, not for some client side feature that can be easily unlocked
they still have to pay for the backend infrastructure
my point is that this is not a client side feature, so it can't be unlocked by some cpu vulnerability. This is a case in which a subscription service DOES make sense