I mean, this statement shouldn't be shocking to anyone. Critical infrastructure should be air-gapped if at all practical.