Most shop security is security through obscurity. For them to lock it down, they need to manage those secrets all the way back to a cloud identity provider. They can and probably will do that eventually.

I assume Tesla does that already.