Hmm well I think we'll just have to differ there. My view is that they want to see change which they know isn't going to happen unless the consequences of not making any change are made clear.
And probably will be. Forever.
But that's not what the freezer hackers are doing.
So let's hope that the people in charge of those things are getting the point that not only do you have to install a door (firewall) you have to be aware of exactly who or what goes in and out of the door. Otherwise there was no point installing the door at all. Why would a power grid in country A be connectable from an IP address in country B? Sure the attacker could be in country A (or using a proxy so that they appear to be in country A) but that's why you can't simply install a door and expect it to keep attackers out. Someone or something has to actively watch for unusual activity just like a building security guard. This is not easy in the case of a firewall unless the firewall is sophisticated enough to flag the fact that although access came from an IP address which could be an authorised user, it happened at an unlikely time such as 2 AM or there was some other unusual aspect to the access. It is also the case that someone or something has to actively follow up on the report produced by the firewall so as to be sure whether the access was legitimate or not. It is true that much of this can be automated but it is also true that most places don't do it at all because no-one knows how to do it or why it's necessary.
Which is never going to change.
The attacker will find some other method. Such as a knock on the door when you are not home and the cleaner is persuaded to allow the thermostat technician (who has very official looking ID) access to the thermostat.