Tesla is locked down good for remote hacking. But if you can get physical access you can do just about anything. But the same holds true for every other car.
Agreed on the physical access issue... I guess I'd feel better if some computer security companies put their names on an independent review or something.