I guess it boils down to a definition of the term "bug." But I feel like a lot of the knee-jerk responses (and voting) didn't read the article carefully enough.
It is a core design weakness rather than a "bug" (implying an error) in an actual good design. I think the distinction is subtle but it is there.
[0] https://www.tesla.com/support/energy/powerwall/own/monitorin...
[1] http://azmag.gov/Portals/0/Documents/MagContent/Tesla_Powerw...
The password is a level of incompetence beyond what you'd call a bug. It's clearly following a design decision that was imposed by someone with zero security experience.
This is potentially dangerous as attacker can just drive around hacking power walls and schedule an attack on the grid.
[Citation needed]
You're assigning intentionality where incompetence would suffice.
But I agree that it indicates that they haven't gave any consideration to it, and in 2019 that doesn't count as trying anymore. At least because we're talking about a well-established hardware and software vendor, not my grandma.
Posting 0-days on GitHub isn't responsible disclosure. The real test will be to see how fast it gets fixed and what the fixes end up being.
The worst thing they did was the default password.