It’s possible to unlock and start a Tesla using only using a driver’s App username and password (without the need of a key nor the pincode to unlock the onboard dashboard!)
Let this be a reminder to never trust free Wifi; especially not Wifi that requires you to “log in” (*). Also: Services like these need 2FA …
(*) If you really need to then I suggest trying to log in with a false username/password combo … if you’re in (using that false info) it’s rogue. Additionally: Whenever you’re on free Wifi, use a VPN.