Unsafe remote dosing changes

A hypothetical dosing-pump scenario in two parts: direct internet access to an HMI where a change from 15% to 95% is accepted with no alarm, and secured remote access through MFA, a gateway, a hardened jump host and an OT firewall where controller limits (0 to 30%, 5% per minute ramp) reject the change and raise an alarm.