I think it's also worth noting that "security certificates" in this context are almost certainly there for the purpose of locking the system away from modification by the vehicle owner, which means they weren't necessary (and indeed, ought to be prohibited by law) to begin with.
Rivian was hoist on their own consumer-hostile petard.