At the very least the system should pull configuration info from a trusted source at predefined times instead of being available for it to be pushed at any time.

Easy, you don't connect the control systems to the monitoring systems.

It doesn't need to be perfect, it only needs to be better than what it is today (predictable passwords)