> Physical access should be the only way to shut down a system like this.

Your opinion does not change the fact that virtually every automation system can be access remotely. It can be done safely with proper access controls.