They should keep critical controls inaccessible from outside their intranet. No wireless connections in that net either. Problem solved. it's all b.s. if they wanted to make this stuff safe they could.