CISA’s critical infrastructure performance goals win praise, but questions remain about effectiveness