As far as I understand there is an industry standard solution to that problem: You put the computer you use to control the special hardware on an isolated netwo

As far as I understand there is an industry standard solution to that problem: You put the computer you use to control the special hardware on an isolated network and never, under any circumstances, upgrade it.