> Should be, I agree. Though I would doubt that they are. I think that's mostly to do with the fact that many industrial control systems still in use predate T

> Should be, I agree. Though I would doubt that they are. I think that's mostly to do with the fact that many industrial control systems still in use predate TCB or anything like it. "Why change what works", etc. Contracts for new designs, meanwhile, tend to specify all the security they can think of.