Leasing car returned. Nach resale still access via BMW APP

I once wanted to share a frightening discovery. In May we returned our leased BMW I3 to the dealer. Recently the car seems to have been resold. I noticed that at once the BMW app (which I never actually used) reported that a charging process was started. This made me curious and looked at the APP. I still seem to have full access to the car. In the last few days I was able to track the different locations and charging states. I once tried to turn light on and off, according to APP the command was sent in any case. I find it frightening that BMW apparently (at least in this case) did not make sure that previous owners no longer have access to the APP. To my knowledge, as a customer in the APP, I also have no way to see who else is logged in. Thus ic h now theoretically go to the car, open it and do a lot of scraping. I will now delete the car myself, but wanted to share this realization.