If you brick a car and you can't convince Tesla that you were doing legitimate security research, they will refuse to reflash it. That's if they don't effectively brick it for you by blocking your VIN from getting parts and firmware updates when a future update detects unexpected features being used. Hacking these cars is an expensive and risky endeavor compared to just coughing up the money for the extra features.