Aviation safety is mostly about learning from past experience. You mitigate known hazards that, once mitigated, stay mitigated.

Cybersecurity is about adversarial hazards. When you mitigate them they actively try to unmitigated themselves.

It is more analogous to TSA security checks than to FAA equipment checklists. The checklist approach can prevent copycats from repeating past exploits but is largely useless for preventing new and creative problems.