One could argue the ability control power under load is a safety feature. What if they hardened the wireless attack surface and added a manual safety switch which could also be used to intentionally brake the device, would that be better? I don’t think it would. I really don’t think the device needs to be stupid proof at the expense of the ability to be directly controlled by not-stupid persons and above.