How To Fix This Once And Forever
Satellites, data center servers, firewalls, industrial control systems (water supply, electrical substations, sewage treatment plants, etc.), sensors, and their control computers require remote monitoring and operation. Remote Desktop Protocol and X11 are among such applications. Clearly, these command interfaces must be protected against unauthorized or hostile access; a wide range of private and state-sponsored cyber actors—such as "hackers" and cyber-warfare personnel—must be fended off. Fortunately, however, there is no need to process potentially hostile data packets at the application layer. This allows the security challenge to be reduced entirely to a problem of cryptographic engineering. In turn, the cryptographic design should be minimalist, thereby allowing its correctness to be mathematically proven.
More: https://di-fg.de/MinimalesChiffrierSystem.html (use GT for a version in your language)