Espionage seeks information; prepositioning seeks options. When intrusions into utilities show no collection behaviour but meticulous persistence, the reasonable inference is that access itself is the payload — held against a future crisis.
Defending against options
The defensive shift this demands is uncomfortable: assume presence, practice manual operations, and measure recovery time rather than perimeter integrity. Resilience, not exclusion, is the metric that matters.