[ktpsns]

> Uploading incorrect settings is like intentionally missing a basket in basket ball, it’s not very impressive.

And

> Someone [...] found out no settings had ever been uploaded to the relay!

Thats exactly the point. Critical hardware should not be user-configurable, especially not from remote. You would not leave the "root console" open to untrained personal, neither should it be opened to an untrusted network.

My feeling in this context is that security should not be a compromise of cost-efficiency and usability but a strict requirement. In days before the internet, somebody had to get on their truck and take a ride to the power plant station. That's a whole different level of intention compared to "just" sending some mallisicous packets over the internet.