My mum's ES was stolen last week. Thieves took about ten minutes, ripped the bumper off, played with some gizmo, the car unlocked and off they went. Just a few weeks prior she had contacted Lexus concerned after some media reports but they assured her it was the RX and NX that were being targeted and not to worry with the ES.
She has now written to the CEO. At the very least they should inform customers of a vulnerability coupled with a seismic increase in thefts, so that owners can take steps like buying the immobilizer, better tracking (thieves have disabled the WiFi so it still thinks it's parked outside her house) or even just hiding an Airtag somewhere.