Lack of multi-factor authentication, inconsistent protocol encryption, unpatched vulnerabilities and no intrusion detection capabilities. OT security is evasive