So I worked for a company who's product was sensor networks for this exact situation, and the European company who bought us had a cloud-only solution they wanted to replace our on-premise product with. Thankfully most hospitals and research institutions in the states are smart enough to reject cloud-based solutions for this exact reason. In theory you could penetrate our systems but it would have to be a very direct, specific attack to be able to do it. My colleague in Germany has been an SWE contractor since 1978 and is genuinely the best engineer I've ever worked with. No matter how off the wall my ideas were he'd already considered it and eliminated it as an option.

Or if you really really want to, make sure it’s just a read/view only architecture?

Yes, especially after this has now been happening again and again. First case can be excused as usual bad practices and lazyness. But it should have been a wake up call causing anyone else operating commercial freezers (or even other equipment) to review if/how they are connected to the Internet. Anyone getting hit now is maliciously incompetent.

You can learn from TSMC or power grid networks. These networks are highly secure and must be separated into internal and external networks. There shouldn't even be any chance for the external network to access the internal network.

Of course, physical ports are also a risk, but they're easier to detect. At least someone has to come in.

Centralized monitoring of thousands of refrigerators makes sense but it should be read only.