This sounds like someone not keeping noticing the obvious because "that's the way we've always done it". A cars ID and VIN have always been related because it was really helpful for a long time, sounds like time to separate them out.
Forcing a bluetooth pair and key exchange onboard sounds like the easiest fix for this.