The weakest link may be a single person. The Binance case suggests that attackers who compromise an engineer and pivot into internal systems that can authorize transactions can bypass strong cryptography entirely. Industrial equipment is exposed in a different way. Refrigeration units, water pumps and building systems were built for reliability, not hostile networks, and many sit on the open internet running unsupported software.