I and most would completely agree with this. The challenge is that even despite these measures vulnerabilities will still be found and exploited. In the same w

I and most would completely agree with this. The challenge is that even despite these measures vulnerabilities will still be found and exploited. In the same way that critical safety systems are also found to have vulnerabilities. In my opinion what needs to be done and should be done, is looking at the network as a whole and thinking about how you can mitigate the impacts of potential vulnerabilities and designing the entire network with defence in depth. If it's a critical OT system that controls a power plant which could kill or injure someone, then it should realistically be completed air gapped as a first point of all.