And zero trust has to reach it without bringing the system down.
Plant networks trust anyone who gets past the firewall. A valid login still says nothing about who is on the other side.
Detection engineering is not failing. It was specified for conditions that are increasingly becoming legacy.