Basically,
If you have a CAN-bus headlight, thieves can break into it, connect on a hacking device, issue commands, like open door, start engine,...and drives away.
CAN-bus apparently works on a trusted device relationship. Any hacking device will be "trusted" and the command accepted....