Seems like that would be trivially managed with a firewall (canbus security gateway). Is it purely cost that they don't lock down or segment off the canbus? Being able to steal a car by talking to the immobilizer through the headlights comes to mind.