Researchers found API flaws in cars of 20 manufacturers exposing owners’ personal info