Will we soon see legislation restricting industrial control computers from having internet connectivity?
I'm amazed it isn't already required.
That said, didn't Stuxnet attack isolated systems via social engineering and USB sticks?
True, but sneakernet protocols are more difficult to navigate and hack than any NAT. Why leave that attack surface exposed?
I agree completely. It was more an observation that keeping important systems isolated is at least enough of a thing for attackers to be already trying to work around it; if anything, I'd take that as a sign that critical infrastructure that's not isolated is dangerously behind the times.