I guess it makes sense. It just feels like there should be a separate bus for that rather than dumping it all on the same bus used by the engine controls.
There are multiple buses, and a gateway between them. The separation is more for reliability and/or bandwidth concerns than security, though given the terrible track record of the industry I wouldn't trust a hypothetical "secure gateway" from them either.