They could have used a pre-populated mirror and airgapped the whole system from the internet. IMO this incident was 70% incompetence and 30% AI superpowers.