That doesn't excuse them being controllable over the Internet. I can understand that remote monitoring is important, but it's in a supermarket. There's always going to be somebody on site who can control things locally. The telemetry can be transmitted via data diode, automatically re-transmitting on schedule so there's no need for any remote control.
> There's always going to be somebody on site who can control things locally.
No, there is not always someone onsite with the experience and knowledge to monitor and change the system. Grocery stores do not have staff refrigeration techs onsite, they contract that out.