The reality is that if you have people equipped to poison the water supply, they will be able to. Most water systems have multiple interconnects with neighboring systems to allow exchange of treated water. Security is typically nonexistent.
The good news is that that type of attack isn’t particularly useful as a terrorist event and is likely low risk.
Texas is putting it back into the municipal system.
https://www.texastribune.org/2012/06/11/texas-gets-creative-...
Basically, water treatment plants have to make human-safe water, but then they dump it into rivers or the aquifer, where it mixes with other water and is pulled out again downstream for purification. The logic is that we may as well skip the "mix it with untreated water" stage.
Google "toilet to tap" for more examples.
Bill Gates drank some:
https://www.npr.org/sections/goatsandsoda/2015/01/10/3761823...