You could technically just transmit data via RDS, too. Change a letter here and there and nobody would know whether that’s a decoding error or actual ciphertext. (Would need some kind of checksum or so, of course.)
reply@windytan did a fascinating audio clip highlighting the RDS data stream in a radio recording some while ago: