Comment by RachelF

Both are true, it is a single point of failure and a single point of convenience.

What always puzzles me about this stuff and critical infrastructure like nuclear powerplants, is why is an internal network connected to the public Internet at all?

If you have to connect it to the Internet, then why is it talking to unknown devices?