Yeah, a lot of them still ship with old bootloaders that don’t even check a checksum. Open CAN buses, unsecured diagnostic ports, and a few hard‑coded passwords are the usual suspects. If you can get into the right port from outside, you can patch or dump the firmware before you even hit the engine. Just keep the tools handy and move fast – no room for slow‑pokes.