there is no conceptual problem tunneling dbus over X or adding a secure TCP auth mechanism. it already works if you have a network home dir in common (because the "cookie in homedir" auth then works).
it's just a matter of someone caring enough to do the work. in around a decade not a single person has wanted this enough to code it or pay to code it. That's why it didn't get coded.