@rozenglass @wolf480pl @domi I don't think it's that low a bar but it should be doable, if it's not well… architecture/engineering problem right there.
Or just pure economical problem of "Other companies cut costs by getting away with ignoring security, why not us too?" which is why then regulations like the Cyber Resiliency Act have to happen.