The Elephant in the room that everyone fails to notice is that the controls for this pipeline are connected to the internet.
To me the obvious solution to the hacker problem is to not use an open network (internet) for control of a critical infrastructure.
Air Gaping controls for systems is an obvious barrier to hackers.
Yes it is expensive but one ransomware attack probably going to eat that cost and then some.
The problem is that the air gap is between the ears (pipeline people, Feds), not between the pipeline controls and the internet.