Is having your VIN displayed a security risk now? These thefts could have been prevented if the VIN wasn't visible; not saying it wouldn't have been possible just a bit more difficult.
Actually the VIN isn't the problem. The problem is either a malicious dealer with access to the Jeep replacement keys database in Mexico, or Jeep running an insecure database (which I doubt) that allowed the gang to connect and search the data they wanted.