Comment by lnrd

The OS doesn't matter, the question should be why is critical infrastructure online and allowed to receive OTA updates from third parties.