It gets mentioned at the end but service disruption really is the problem here. Reminds me of how quickly my govt (Canada) breaks strikes nowadays to avoid these disruptions.

I don't know if there's a way out of businesses that don't see the value of IT ignoring these risks (outside of legislation) but I hope we don't end up in a situation where bailouts are common/companies rely on govt intervention.