I'm glad that Tesla is taking steps to improve security, but there are still a number of gaps that need to be addressed. I was impressed that Elon showed up at last year's Blackhat conference in LV to launch an official bug-bounty program. On the other hand, I am a little surprised that Tesla does not have a full-time CISO on staff. I spent a few days with Tesla's former CIO while visiting China (who incidentally joined NIO), and we spent some time discussing automotive security in general (nothing specific to Tesla). Tesla is still ahead of most manufacturers in this respect.