I’m still shocked at how much of this crap is connected to insecure networks. Last time I dealt with PLCs which were used on an test automation line was over 20 years ago. And they were airgapped and I actually had to fly to the customer site to update and qualify the software. Even the cross site stuff was tunnelled over private phone pairs.
Surely even now that’s cheaper than connecting all the SCADA crap remotely and getting owned.