A manufacturing plant runs a SCADA system that controls production line machinery. The vendor no longer provides firmware updates, and the embedded controllers cannot be taken offline without halting production for days. A recent assessment flagged several unpatchable vulnerabilities in these controllers. Which architectural consideration is the security team primarily dealing with, and what is the most appropriate response?