We agree that critical infrastructure must be protected against cyberattacks, particularly in the wake of the Colonial Pipeline ransomware attack, but the process by which @TSA has issued these directives raises concerns.