A feature of "cautious mode" (valet, anti-carjack, call it whatever you want) would be seamlessly integrated into the drive and park scenarios.
Something like this:
- every time you put in park, make it very easy to activate the mode. Looking at the controls available, this could be done in a very slick way.... such as pressing and holding Park for 2 seconds. You are now in cautious mode. By all means, do not make a user type a PIN into the console screen on the parking spot. That can be observed.
- once activated, the car will only behave in a cautious manner (limited power, limited speed, limited distance, limited run time, limited features)
- there is zero visual indication the car is in cautious mode
- in cautious mode there could be expected visual feedback given for all controls, as a placebo.. GPS is off, great! But really there'd be no effect.
- in cautious mode, hitting any of the restricted limits causes the car to emit a beep-beep-beep-beep tone while driving (a cue for legit driver to get it out of cautious mode), if the car doesn't come down from the limits or the cancel sequence is not done in 10 seconds distress signals start going out via internet and limits go into effect.. possibly cutting the drive power to zero if that was a set limit.
- in cautious mode, a user defined sequence is required to resume normal operations. The more secret the better. This could be done (counter-intuitively for a Tesla where everything operates on center console) by pressing steering wheel buttons in a sequence... easy to do, hard to observe, and keeps PINs off the center stack. There should be no visual indication or prompt suggesting cancel sequence needs to be done, at any time.
- and as a final touch, accept two different cancel sequences. One is a real full cancel. The other is used under duress when being threatened, which causes internet panic beacons to immediately flow, and removes some limits or sets them to higher threshold.. removes the beep-beep-beep-beep tone at limit, but does not remove all restrictions (GPS off... continues to be a placebo).
How about that?