@stefano@mastodon.bsd.cafe
In the critical infrastructure sector controls are designed to fail open (as in break the circuit) and monitoring systems all have watchdog timers. If an "I'm still here!" ping is not received when it's expected to be received, an alarm goes off.

I say this not to distract from your original point.

External monitoring for critical systems is a must.