Also it’s madness that systems like these are connected directly to the internet without read-only permissions implemented.

Water systems in the US are, too. And they have been hacked.