Honestly not surprised considering just last year I was setting up connected drive in my 2015 BMW and I had to call into BMW and ask a CSR to set my password. Please set my password to: _____________. They have since updated their site and you can do this via the web now but shows security is an after thought IMO. Shameful...