Yes, and to do that, CAN must be encrypted. The idea isn't just to secure it from hackers. The idea is to secure it from owners.
> SecOC, which is cryptographic authentication but the message is still plaintext
> SecOC, which is cryptographic authentication but the message is still plaintext