Engine immobilisers cut out all the easy “jam a USB stick in there” attacks, The Kia Boys do not exist in Australia where they’ve been mandatory for 20 years.
Lesson here for Americans - if you want something like this it has to be legislated. Cheap manufacturers will absolutely save a few bucks and not include it if they can.
I have had my car stolen twice so this issue isn't distant from me, if it has become a state issue it needs a state solution.
Individual responsibility seems to be the American preference though, on an individual level you have the ability to install an immobiliser, and being familiar with the car's features when you make such a massive purchase shouldn't be unreasonable.
This is a darkly hilarious take.
Now I live in a country where it's normal to leave cars with open windows and even doors in the street so that they don't overheat in the sun. Sometimes even with keys dangling.
No immobilisers necessary -- only decent people are.