There is a new unece regulation, requiring strong temper protection, which means at least CAN authentication. https://unece.org/sustainable-development/press/un-regulatio...