Definitely agree, I've never understood why so many seem to end up connected to the internet at large, or through some easy to pass through gap. Even before St

Definitely agree, I've never understood why so many seem to end up connected to the internet at large, or through some easy to pass through gap. Even before Stuxnet it never quite made sense, and post stuxnet it's hard to argue that it's not negligent to have a setup like that. The only thing I can assume is that because having it as a separate lan that's not routed to the internet (arguments about vlans being sufficient, etc are a different discussion) would cost more in both hardware and maintenance.