The EU already classifies digital services like those provided by Starlink as "critical infrastructure".

Operators of such services have to comply to the highest level of the EU CER-directive for Physical and Cyber Security. This includes physical shielding, strict access controls and resilience against physical sabotage/terrorism as well as natural disasters or severe climate changes. This is the duty of every player in this business.

The government has a job to stand up against a potential adversary of the country (be it other countries or local terrorists), and in case of an attack on critical infrastructure the government will also step in to protect it, I agree on that.

But it doesn't have the job to take over Starlink's (or whoever's) business operations and make it secure. That is the job of the company, long before it even appears on any map of a potential adversary...