I would not say these "leaks" are necessarily incompetence like some have been quick to assume. These "leaks" don't really leak anything at all... and it's possible their team reviewed the files and determined "who cares".
It's also pretty likely Tesla's staff has very little to do with the website, other than content. It's a Drupal site after all - some 3rd party might be in charge of hosting it, making this mistake theirs to own.
aside from being a potential security risk, it is downright embarrassing and sloppy, especially for a multi-billion $ company with a leader who is super vocal about "hard-core coding"
musk fan or not that's pretty ironic
Literally nothing learned from these "leaks" that wasn't already known.