Thankfully cars use more reliable things than http.

But the point is that security related messages should be sent through another can bus, which is actually already the case. Except for earlier Tesla's, because of course their idiotic CEO thought he knew better than every single other car manufacturer in the past half century