Thought I'd post up a topic about this.
On the MQB2020 platform (eg Golf Mk8) there is a new security system in the diagnostics interface called SFD.
This is a security mechanism that locks away access to much (not all) of the things people are used to fiddling with on cars like the Mk7.x.
It comes about obstensibly because the EU are concerned about with the rise of automation and connectivity in vehicles that access to configuration could result in death and injury. (This is fact)
The SFD system is "gatekeeper" to an array of the settings and uses a one time password access control system. To gain access to SFD protected elements you need a token generated by VW themselves using their GEKO system. Only authorised dealers and qualified independents have access to GEKO accounts. The tokens are VIN specific and have a 90 minute life.
Additionally GEKO records of a change taking place and who's GEKO account was used are logged.
It seems unlikely that anyone will overcome this barrier, this is the same PKI style technology used for things like secure websites.
There is more here as well, there are things which VW have openly told us about their ability to unlock options remotely using a built in "shop" in your Mk8. Things like Matrix IQ (not standard on non performance Mk8's in the UK)...
This is actually the tip of the iceberg, it seems there is much more to come and that all sorts of hardware is actually present in Mk8's and that in the future they may enable unlocking it for a fee, of course.
For example NavPro is the same hardware as basic Nav in the UK.
Why can't you get maps on both screens at once OR EVEN JUST ON THE AID without NavPro? Because VW have disabled it.
Bascially, SFD prevents people from activating things VW might want to sell you at some point.
Just to show you what could be changed.... these Italians have modded a Golf Life:
https://youtu.be/HpQgNuwxd94(sorry its all in Italian, watch the pictures though)
They used GEKO to get a key to do that, before you ask.