To metaphorically put it: no matter how good your 2FA is, I can always get around it if I can torture you or threaten your loved ones.
The goal is cars that are harder to steal and electronic security measures that follow something resembling best practices.
The whole point is that what was sold (some kind of key security) was half-assedly implemented.
I had to replace part of the engine on my personal truck recently because it was made of plastic and obviously failed. The replacement parts were metal because all I did was order the previous generations part number which works perfectly fine but costs more.
What you call "half assed" is what everyone in the industry calls a profit margin.
Quality switches suitable for use in a vehicle don't cost $0.10, they cost $0.01!
-at the volumes they'd be purchased for auto manufacturing.
Right, but in practice deterrence and incentives can be much more effective (from a cost and practical standpoint). I imagine the government would have a much harder time stopping people from randomly chaining vehicles than tracking stolen ones. There just doesn't happen to much incentive for the former.