There is much lower hanging fruit (scada systems).

http://en.wikipedia.org/wiki/SCADA

I've seen a couple that used unencrypted UDP with bitfields representing the state of solenoids. Imagine what sending a series of all '1' and all '0' packets would do in terms of damage and panic.