You could for example hook up the radio to a CANbus that has a minifirewall/proxy in it, allowing only read from the radio and write/read to the radio.