Recommendations in article are sound, zero trust infrastructure is a nice to have.

Probably need something similar to a wake up call some industrial companies got with stux in the 2010s or hell their insurance company charging the sh*t out them unless they fix some things.