I get that the whole blog post is an advertisement, but infotainment systems should be physically isolated from control systems.

Furthermore, just using a microkernel doesn't actually provide any guarantees. It's a sound architecture choice, but that's all.

There are advanced control techniques that prevent replay, sensor spoofing, and other attacks specifically for control systems. But it doesn't look like this particular product implements those.

Correctly using a security-oriented microkernel only mitigates certain (really stupid) classes of attacks. These sorts of application domains deserve serious, in-house engineering effort aimed at very well understood risk/attacker models that are specific to the particular control problem.

Control systems need traditional pentesting/security types so that you're not broadcasting root credentials in plain text (...jesus). But a hardened system also needs input from controls/sensing people who understand security problems associated with particular application domains.