We don't know if it can be enabled remotely from this story. There is no evidence for that beyond your speculation. There is only evidence that it cannot be enabled remotely. This is why I said your claim is false. Looking at other instances, or the documentation, will probably show that it can be enabled remotely, but that evidence is not here.
But, it appears your perspective is that if remote control operation exists, so it can be hacked. This is proof that remote control operation exists, so it can be hacked. Framed in that perspective, sure I guess.