For more than a decade, vendor remote access has been treated as a practical necessity.
OEMs, maintenance providers, software vendors and system integrators were given persistent access to critical systems so they could diagnose faults, apply updates or “keep things running.” It was efficient. It reduced friction. And for a long time, it felt reasonable.