It's an argument for internet-offline utilities. Didn't Stuxnet prove that's not good enough? Windows outside, linux controlling computer, and custom (Siemens, etc) utility machine controllers, all unable to talk to each other, including USBs - then we might be safe.