Most of the larger scooter companies don't do it, so it seems unlikely operating such a system requires trying to get around the first rule of network security.

I feel like we (that is anyone nerdy enough to post on HN) have been far too patient with people who are choosing to wage a war on general-purpose computing, and it's past time to push back harder.