I think this comes down to the implementation of a particular system. But in general, since control system (the one that controls things through actuators) is NOT online, one can't interfere with it through online channels. They can interfere with sensors and fake readings reported online for example, probably, but not the ones used by the control system as it's offline.
replyIndeed, I agree that it's better to have the control systems separate from the telemetry systems and that absolutely does prevent certain types of attack. It's dangerous to think that prevents all types of attack, however.
reply