I'm aware of this.. but I'm also aware that 98% of people will not have the tools or the know how to use them in order to take my car.
And having IMMO is better then not having it at all... besides it wouldn't be the only safeguard I have... just another one that is mostly transparent in operation which is nice.
The $1 mil question is can this be done without key with valid immo ID? remember that while it is possible to disable immo with a tool via OBD2 with a tool, it so only because you normally have original key with valid immo ID in the ignition which is a prerequisite for ECU to allow programming session.
If you don't have valid key in or do it on the bench, it is not that easy. It requires boot mode programming.
I am not 100% sure if there is a work around this by hacking into a cluster, taking SKC and re-programming it to some other ID, then trying to do ECU adaptation to your "hijack" immo id with the VCDS procedure, but it sounds like a lot of effort to jack somebody's car. It would just be easier to flatbed the car tbh.