We do, but companies are given a billion years to implement that because The Economy ™️

There's nothing as far as I know, even in industrial settings. Some companies are better than others, and some fields are better than others, but at the low level everyone does whatever the fuck they want. Always-connected teleservice routers and similar devices are everywhere, with outdated firmwares just waiting to be hacked. It's improving but very slowly.

The whole field is evolving, there is the EU Cyber Resiliency Act and some provisions for critical infrastructure.