These two may be deeply involved, but as a quality engineer for an automotive electronics tier 1 supplier... there is no way they pulled this off themselves. Suppliers had to be involved, programmers, management, lots of support staff. This was not just a handful of people. Particularly given the multiple platforms involved. So if they just focus on these two and you never hear about anyone else being implicated, it’s a real failure to root out the whole rotten gang.
Or management knows they can’t afford to lose that entire crew, and those two are the fall guys.