Plaintext Passwords Often Put Industrial Systems at Risk: Report October 22, 2018 https://www.securityweek.com/plaintext-passwords-often-put-industrial-systems-risk-report 2019 Global ICS & IIoT Risk Report (PDF): https://cdn2.hubspot.net/hubfs/2479124/CyberX%20Global%20ICS%20%2F%20IIoT%20Risk%20Report.pdf
Which raises an even more important concern or question. Do they even have any adequate, even simple provision in place so far as a Back Up System in place?
Nah... Judging by the rest of those numbers (40% connected to internet, 53% still using XP and 69% unencrypted) I bet their "back up" system is bunch of 5.25" floppies ...