Why even have the firewall? Wouldn't a true airgap be preferable? At the same time, having say steering and brakes on the same bus adds a single point of failure to both steering and brakes, which is not ideal.
Cost and risk management. These systems undergo rigorous safety evaluation, auditing, and testing. This is a manageable risk (very low) given the business requirements and the threat model.
