A midsized software vendor can become strategic infrastructure in war. If attackers control a trusted update channel, one ordinary business app can spread disruption across an entire economy instead of hitting a single target.
M.E.Doc showed that clearly. Russian military intelligence used the tax software platform to push NotPetya, and the damage reached thousands of unwitting companies worldwide, with losses measured in tens of billions of dollars.