Could we also consider just not connecting critical systems to the internet at large? No reason, for example, for the Jaguar assembly line to depend on an internet connection.
You can see the appeal for not needing to go through all the issues, complexity and costs that entails.