That WaPo article gave me pause as well - and it explains why the West isn't focused on completely disconnecting ('air-gapping’) the RF from the rest of the Internet. It seems the only thing the RF has going for it cyber-security-wise is that so little of it is set for remote control. Here in the US, utility workers can check, say, status on substations without physically going there. The RF hasn't got that.