Perhaps they can run simulations on multi-protocol security layers and not put an IP address on anything of value and see what happens.

I hope the media reports this as something similar to their baby monitor or webcam being compromised (or attempted to). This is not user error.