The European framework for protecting critical infrastructure is designed for a world that no longer exists. Current regulations focus on formally designated sectors, but fail to account for 'hidden' critical assets—such as supply chains for essential goods or non-hospital health providers—that become vital during crises. The author argues for a paradigm shift that moves beyond binary definitions of criticality, advocating for a system designed for maximum credible crisis scenarios, supported by cross-ministerial coordination and a financial pact to share the costs of resilience.