The security predicament of industrial IoT devices stems from their lifecycle and design orientation: their design life often exceeds ten years, embedded controllers prioritize stable operation above all, they are rarely upgraded after leaving the factory, and problems such as default passwords, plaintext communication and lack of network segmentation are widespread.