People already have the cars. And the 2023 models don't seem to be affected. So getting people to stop buying them is sort of pointless (because the people who already own them are now stuck holding the bag). If the government has no business getting companies who produced a flawed product that—as you suggest—people should stop buying to fix their products, why exactly do we have standards at all? What part of "you have an obligation to issue a recall that fixes the product" is micromanaging? That could be done with a court order.

> the scenario you proposed is already possible with face unlock

I didn't mention face unlock. Any fingerprint sensor that is trivial defeated is fundamentally broken.