> I am sure there is a rigorous protocol The "rigorous protocol" is one-way hardware diodes. The telemetry simply cannot physically travel the other way. Now,

> I am sure there is a rigorous protocol The "rigorous protocol" is one-way hardware diodes. The telemetry simply cannot physically travel the other way. Now, of course, there can always be mistakes. Certification is supposed to catch that, but of course, that isn't fool proof either.