Yes! Agreed! Earthbound observatories in second line are in a constant struggle of acquiring proper funding. Which means, that they are operated by people with passion - for the science. The unfortunate side effect is, that everything that isn't operations and academia takes second place again. Employing someone dedicated to just cybersecurity isn't perceived as a priority - after all, 'why would anyone hack an observatory?'

That is the kind of fallacy that can only be avoided if you already had an expert in house, unfortunately. I have been working with researchers, too, and I got the general impression that the appreciation for and crossover of ideas between departments has a lot of room for improvement. So that could also be a factor.