It looks good on the surface, but it seems to be a shoddy compromise for PR looks mainly.
So, you can enroll IF you happen to have a Tesla and are a known security researcher. Put that into a Venn diagram and how many people does it leave you with?
And they will do OTA or reasonable actions at a service center, if deemed appropriate. That is such a dirty weasel-clause. To me it reads: If we can't OTA it, you're free to tow your car to the service center at your own cost. If you shoot out the control unit beyond what the Tesla diagnostic service computers can deal with you're on your own. If you genuinely brick the device beyond physical repair you're on your own.
How about: we will OTA or attempt to service the control units for anyone who requests it, even hobbyists. If you are a vetted researcher you can be assured to receive a replacement control unit if necessary and you are eligible to receive a set of control units to work them over in a proper bench setup at your hearts content, without freezing your gonads off in the cold garage.
That would be a worthy recognition of free security research.