> Because if an AI takes over the systems at a factory, it can't really do much beyond what the factory could already do.

That can be enough, eg stuxnet. And like stuxnet they don't need to connect directly to the machinery themselves for a payload to breach them they just need someone to deliver the payload for them. And the machinery might be decades old, the software might still be Windows 95.