Derek is lucky I’m a nice person, but if I reset his OnStar account password I wonder if I could remote start his truck until it runs out of gas, or lock him out of it, or flag it as stolen.

Please for the love of god if you run any sort of system that involves account creation, make people verify their email address and phone first.