Some shops try to reverse engineer the modules and create clones, and that works a little bit, but it's a real problem. But that was for modules made in the early 2000s.
Now fast forward to today where the electronics is completely different and much less durable. You have basically PC motherboards being inserted into cars. I think people have not yet understood the implications of this in terms of their car's durability.
I've been talking to a guy with a 2007 Volvo and the upper electronics module failed -- it's in the rear-view mirror. Now, you can still drive that car, but he pulled one from a junkyard and tried to replace his -- now the CEM wont recognize the module. OK, with Volvo, you can crack the CEM pin and get it to accept the new module since the reverse engineering community has managed to figure that out.
But with modern cars? With the "software defined vehicle"? You are S.O.L.
When a mechanical part fails, you can fabricate a new part, and aftermarket vendors come and make replacement parts. But with software? The vendor isn't releasing the code. You can't make a replacement.