Critical systems need you to get out of the way and let them do their job. Security can't degrade performance.

Being both minimalist and non-interventionist are the differences in the approach compared to traditional programming or security.

Although, to some extent, industrial systems are losing some of their constraints and connect to the internet more than ever. It's one reason why my job is challenging.