In order to integrate more renewables onto the grid (which are non-dispatchable generation), we need to add more generation and load flexibility on the grid. T

In order to integrate more renewables onto the grid (which are non-dispatchable generation), we need to add more generation and load flexibility on the grid. This means you need more communications between all the various parts running the grid. So it's not just the switch that opens the valve at the gas turbine power plant that you have to worry about (which I agree is easy to be air-gapped and interlocked). You also have to worry about manipulation of the communication ecosystem that let all the various grid actors coordinate so everything stays in sync. EDIT: Also, remember that power engineers are extremely good at running the grid and keeping the lights on. They are NOT experienced at protecting it from cyber attacks. Unfortunately, neither the intelligence community or tech sector that is actually good at cyber defense (Google, Apple, Facebook, etc.) has not offered to help add cyber defenses and these physical infrastructures. So, the only parties who have been doing the grid cyberdefense work have been security theater companies ("enterprise" security).