I imagine all commands have to get signed for the rover to accept them, but even if their keys were compromised and some vulnerability was found in the software, wouldn't you also need a network of really big dishes (see DSN) to actually send the commands to the rover?