People are dumb and SCADA equipment is directly internet connected all over the world. I was at a Defcon talk where the creator of Metasploit was able to gain access to floodgate controls on a dam in China. If he was a bad actor or a nation state he could have easily killed a couple of million people by fully opening the gates then bricking the scada controllers.