> "Of course its secure, you can only READ the CANbus, the software doesn't even HAVE a write capability!"

That can mean two things—either the software didn't implement writing but the hardware is capable of it, or the hardware isn't capable at all. Sounds like the former in this case. It should have been the latter.