If your expectations are low, the cable shielding is good, and the signal filtering is good, I2C is okay here.
For anything that matters, I2C should stay on board only, or at worst, board-to-board connectors (with lots of ground pins in them).
SPI is better, because the signals never go open circuit (weak pullup). You still need shielding.
SPI can be sent via RS-422 trivially: just add transmitters and receivers. This is good enough that a shielded cable may not even be needed (you can get twisted pair ribbon cable, or all-weather CAT5 more likely here), though it's still better of course.
Most '422 devices include beefy ESD protection, too.
This thread is rather obsessive. A single 1N5231B and series resistor will do more than good enough. The original device isn't made of glass, it's got an ESD rating as well. Whatever's left after the diode and resistor will be much less duration and energy, and that's what matters. If a 10kV strike is effectively reduced to an equivalent 1kV or less, it won't die. We're not dealing with 1970s metal gate CMOS, or teeny tiny RF transistors!
Tim