It may be an unpopular opinion but I disagree - security is a cognitively biased function owing to historical roots but it actually seldom comes up which fails

It may be an unpopular opinion but I disagree - security is a cognitively biased function owing to historical roots but it actually seldom comes up which fails to justify its costs and there is little incentive to gain from attacking it. Even if a bad actor did bring down the grid all it would do to concrete capabilities is GDP damage that they could easily get credit for and still leave a pissed off superpower able to make an example. Even actual rival status like say China were to do it would be shooting themselves in the foot such that something stupid and self destructive that if the PRC decided to simply start bombing Beijing it would do less damage. Besides for decades a few tens or hundreds of people could go out, buy semi automatic rifles and start casually shooting substations and walking or driving away until someone arrests them. That would cripple power infastructure far worse than any hacker could as it would take longer to replace and be a distribuited issue to fix. Given actual frequency even with lax security and pessimistic assumptions efficiency is a likely winner. Logistics and not superweapons win wars.