There are multiple buses, and a gateway between them. The separation is more for reliability and/or bandwidth concerns than security, though given the terrible track record of the industry I wouldn't trust a hypothetical "secure gateway" from them either.
