Re: And yet...
Apparently you have never hear the term "topic drift". It's part and parcel of online forums, and I would wager a guess that it's the reason most commentards use this forum.
I'm on record as saying that I've been telling manglement that PLCs (and other bits of industrial SCADA haberdashery) should never be reachable from outside the local network. Here's a link to one ElReg post of mine on the subject from way back in 2011 ...
Yes, I know how common rail engines work. They should not be accessible outside the LAN if they are being used in critical systems. Making them accessible to all and sundry is effectively slapping a large KICK ME note on your own back. Sounds like I agree with you, no?