I was just going to say the same as it's stated pretty early in the article

> These attacks could be executed remotely on any hardware-equipped vehicle in about 30 seconds, regardless of whether it had an active Kia Connect subscription.

If this should tell companies anything is that most of these services should be opt-in instead of opt-out in favor of security and privacy.