Sure, but that’s not “slaughter a stadium of people with drones” evil or “poison the water supply” evil or “take out unprotected electrical substations” evil.

So much infrastructure is very soft because the evil people aren’t smart enough to conceive of or conduct an attack.

I think you might find that, if you reconsider who the 'evil' people are, you might find that we're already doing that sort of thing.