> Today such attacks are happening in front of our noses and these systems are still connected to the internet? I've done my fair share of inspecting critical

> Today such attacks are happening in front of our noses and these systems are still connected to the internet? I've done my fair share of inspecting critical infrastructure in different countries and 9 out of 10 times the reason is: cost. Got a bridge / tunnel / trafostation that needs monitoring / interaction? DSL only costs 20 a month, let's do it! VPN and 2FA? Costs & our employees are going to kill us since that is too complicated. Updates of the OS and that application that was tailor made by the maker's daughter in law 10 years ago? Too risky and costly. TL;DR Never attribute to malice that which is adequately explained by stupidity.