AT THE VERY LEAST, the pipeline control system ought to be an ENTIRELY SEPARATE network, with ZERO internet connectivity.
Like a Dominion voting machine.
Har, har.
Standalone networks exist.
“Air gap” is an actual thing.
The automated controls are great, but permitting connection to the Wild-Wild Web is insane. THAT’S where the architectural failure lies.