VW haven't responded?
DESPITE being aware of this for at least the 2 years they gagged him?
I'd have hoped they'd have used this time to maybe oh I dunno, recall and fix a chunk of 100 million cars, but failing that at least put a note in PR's calendar to ask them to prepare a statement on "We take security very seriously blah blah".