It's interesting that most do not seem to be much worried about the insane vulnerabilities and general lack of security in a lot of our critical infrastructure

It's interesting that most do not seem to be much worried about the insane vulnerabilities and general lack of security in a lot of our critical infrastructure. You'd think people should be happy about ransomware attacks exposing how weak it all is, because that's concerning and needs to be worked on. These guys are financially incentivized to pen test even companies and institutions who don't take security seriously. Which includes a lot of public ones too. What a Russian ransomware firm can do, sophisticated state actors manage with ease.