Solar Inverters and National Security Theater

Last week, the FCC banned foreign-produced solar inverters from the US grid, citing fears of remote sabotage. To hear lawmakers tell it, blocking these specific imports just saved American energy independence. They seem to believe that the primary vulnerability of our electrical infrastructure is a geographic supply-chain issue, and that by legally prohibiting the installation of foreign components, securing the border, and auditing shipping manifests, the threat of malicious interference simply evaporates. It doesn't.

The narrative driving this regulation relies heavily on a movie-plot threat, in which a foreign intelligence agency waits for a moment of high geopolitical tension and simply presses a big red button to sabotage millions of home solar panels all at once. We have seen this institutional hysteria before, driving historical legislative pushes to ban foreign hardware based on the paranoid assumption that imported silicon is inherently treacherous while domestic silicon is reliably patriotic. Grid sabotage is a genuine concern, but attempting to solve it by filtering hardware at the border is an operational absurdity. Tampering with components in a factory to insert a persistent hardware backdoor is incredibly expensive, logistically difficult to scale, and relatively easy for auditors to eventually detect. Software bugs, on the other hand, do not care about national borders, and cryptographic math does not check passports. As long as a device maintains an active, persistent connection to the internet, it can be compromised by anyone, from anywhere, regardless of where its plastic casing was molded.

The actual vulnerability lies entirely in the connectivity, which forces us to ask why a residential solar inverter needs an internet connection in the first place. The physical, operational job of an inverter is incredibly straightforward: it takes direct current, generated by the solar panels on a roof, and converts it into alternating current that the local power grid can actually distribute and consume. A device performing this fundamental electrical conversion requires zero external internet connectivity to function.

The requirement to be online is a deliberate business decision, driven by what I call the tethered asset framework. Under this model, hardware companies realized that a one-time sale of an inverter generates no recurring revenue. To fix this, manufacturers actively strip out local programming interfaces—the direct controls that allow an owner to manage the device directly—and force all basic operations through their proprietary cloud servers. They do this to harvest telemetry data, enforce ongoing vendor lock-in, and continuously monetize the end user long after the initial purchase. Security is treated as a completely ignored externality to profit.

And domestic companies are equally complicit in this architectural failure. When you examine the data collection practices and cloud-tethered requirements of US manufacturers, you see the exact same economic incentives at work. They mandate continuous internet connectivity for basic monitoring and functionality, effectively transforming thousands of isolated, localized power generators into one massive, centralized attack surface. The geographic origin of the server matters far less than the fact that a remote server exists at all.

To understand just how reckless this is, consider how we design physical infrastructure to handle systemic risk. We build watertight compartments into ship hulls so that a single localized breach does not sink the entire vessel, and we install mechanical circuit breakers in our basements to isolate electrical faults before they can burn down the house. The modern inverter business model deliberately destroys these local circuit breakers. By forcing local hardware to rely on a distant server for its day-to-day operation, the industry removes the physical isolation that traditionally protected grid components. If a hacker breaches the central cloud environment—or if a simple corporate routing error takes the vendor's servers offline—the damage propagates instantaneously across the entire fleet of deployed devices.

Consumers are acutely aware of this unnecessary risk. Technical communities have spent years begging for mandatory local, offline APIs, pleading for the ability to manage their own physical hardware without routing every basic command through a remote corporate datacenter. But the market simply ignores them. Manufacturers across the globe, whether domestic or foreign, consistently prioritize the lucrative returns of surveillance capitalism over resilient grid design. We are misdiagnosing a widespread crisis of corporate greed as a narrow crisis of national origin.

You cannot secure a system that is fundamentally designed to be remotely controlled by third parties. The market will never self-correct this architectural flaw because the economic incentives to harvest data and maintain remote administrative control are simply too strong to resist. The only way to secure the grid is to mandate through federal regulation that all critical energy infrastructure include local-only, air-gapped operational capability. Either we legally mandate that our physical hardware can function completely decoupled from corporate data-harvesting machines, or we accept that it will inevitably be compromised.