It's more just that this country does not invest in cybersecurity...at all.
Personally I think all assets of national import, private or public, should be able to meet standards set by the DoD. It wouldn't hurt if we'd improve our ability to detect foreign intrusions in our networks and make it policy to detonate a logic bomb in part of their grid if we can identify who penetrated us (heheh, penetrated *Beavis and Butt-Head laugh*).
As it stands we're a joke in this realm.