I know that Volvos have two separate CAN buses, one for important safety critical systems and one for interior functions and infotainment.

They are joined with a proxy/firewall that provides separation and limits the functionality available between the two.

I'm guessing this attack would only work in this case if the attacker could physically access the OBD port to gain entry to the safety critical bus.