> leads me to believe that such cars had negligently insecure encryption

While accurate, the standard may not be as rigorous as you'd like to imagine; there was a time not long ago when a wire coat hanger was enough to unlock a car.