They're the ones that cost-cut the operations of aforementioned critical infrastructure to the point of it being so vulnerable...
Just look at catastrophes caused by PG&E in 2018, ERCOT in 2021, or First Energy in 2003. Not a single one was caused by an attack on critical infrastructure, they're just cutting corners!