Failing to check the signature on the firmware is not some tricky logic bug. It is a simple oversight that should have been caught by routine automated testing.

Failing to check the signature on the firmware is not some tricky logic bug. It is a simple oversight that should have been caught by routine automated testing. This shows they do not have even minimal QA controls in place. Also, as GP mentioned, a physical switch that disables Bluetooth on the key fob when the owner isn't actively using it would make this attack much harder.