>a MAC to prove authenticity is enough.
This would work in most cases, yes.
I think the point that 'masfuerte' was making is that simplicity and redundancy are _the_ bedrock of reliability.
Even if all the new hardware and software to implement this new security model on avionics busses is 100% open and audited by every laudable computer science / security specialist, it's just _more_ to possibly go wrong. That tends to change how people think about risk (weather rationally or not!)