I see what you are saying. I had forgotten that the guest network is set, by default, to not need a password. I have my guest access turned off completely, but I now see what you mean.
That the auto can scan for a network and connect automatically to one it finds without first requiring the owner to approve the access to that particular WiFi is a bit ridiculous and could be a pretty bad idea on the auto makers part.