The car manufacturers forget what stupid cock ups they make so they're in no position to start making demands.
My father has a range rover. When you turn the head lights on, the navigation reboots. When you plug an iPhone into the USB socket in the dash, the headlights don't work. Dealer three times, diagnostics, can't reproduce. Plus the thing thinks he's cpaped the EGR valves but they aren't so it has adjusted engine parameters so it knocks when it runs.
Also if they're going to be honest, CAN is a network so they should be providing two bus implementations in the car: one critical bus for all functions that are safety critical. Hell they shouldn't even use a bus topology, it should be a point to point network. Then a DMZ network for all ancillary functions that the user can extend i.e. for phone handsets, media systems etc.
As for bus encryption, this should not be allowed. Absolutely no way at all. Otherwise it's not your car.
As for safety, all critical systems such as power steering, braking and engine control should be totally isolated and operate independently, preferably with hardware control backup (PS pumps disengage, hydraulic brakes only, engine and box fails to disengaged) rather than what the hell lets go batshit mode.
This makes me want my 1974 Land Rover Series III back. I burned ALL the electrics out in that after a short, went meh, crank started it and drove home.