Well the dealers have to service it, and to do that they need to be able to flash the ECU. Often that process can be sniffed and reverse engineered. Unless GM has gone to over the air programming only. And yes, a security gateway on the CAN bus is likely as well.
Give it a few years and somebody will break through it. The market for GM products is too big.