Re: As I read that
"Everything on the car is wiped. The online account with TomTom is online, not on the car."
If the car was wiped, it shouldn't be able to re-authenticate with the online account. This is a basic security issue if there wasn't a token or key in play here. The only one that appears to be used is a hard coded serial number, which doesn't change during a factory reset.