Some idiots have bluetooth modules plugged into their OBD2 ports permanently so they can fuzz with the engine with their phone or add another "virtual" dashboard to look cool. That's an instant attack vector.
All you have to look for is a typical wankermobile and poke around it with BT and you're sorted.