One thing you can do to minimize blast radius is to make a second Tesla account and add it as driver to your car. I did this with Harumio and had no problem. They would still be able to control your car and see it’s location, but they can’t transfer ownership or see past orders, billing info, etc.
I changed the password after getting the order complete email from Tesla KR (Harumio approved this), and will remove the 2nd account as a driver once I hear from Harumio that it’s been received and forwarded.