Security (or safety) is one reason for multiple CAN buses. Another is saturation of the bus (too many messages).