Bluetooth -> infotainment system -> CANBUS -> Lane Assist or adaptive steering

Die infotainment system should not have this permission, but it does.

The loophole is the connected smartphone from the driver. An attacker could deauthenticate it and mimic the car app.