Spoofing an AIS signal would be trivial for anyone as well who wanted some type of 'civilian' cover.
Here's a report of an AIS spoofing demo:
The Guys Who Can Make Oil Tankers Disappear, Virtually - ABC News
VHF ACARS (and possibly CPDLC) is similarly vulnerable from what I see.