The Blind Spot in Your OT Security Strategy