Pretty much built for someone that knows exactly what they are doing. Like they've read the manuals cover-to-cover and taken an exam.
This isn't just about hacking. A device that crashes hard when it receives a POST with an empty body may do the same thing if there's a physical glitch with its connection, or if a cosmic ray flips a bit somewhere. Devices that control industrial machinery should be more reliable than that.
If this were a hobbyist project, or a toy, that would be one thing, but these are specialized devices that cost a lot of money. They're fragile liabilities that don't belong anywhere near a shared network.
Yeah - I can see even the simplest of network vulnerability scans wreak havoc on a device like this.