Say they discovered Tesla's are vulnerable to being opened and started with the right noise emitted from an attackers phone. The catch is that everything has to be precisely the same for it to work. The time of day, the temperature, the Tesla model and color and mileage, how high off the ground the phone is, everything. If you figure all of that out, you can open any Tesla that matches those identical settings.
1) you have to figure out what those settings are
2) if anything is different, its not repeatable. if you have to figure it out all over again
That's what this attack is like. Its a massive job figuring out how to get into one site and its often not repeatable because something about the next one is slightly different.