FDA has insane, obscure, labyrinthine requirements already, & those requirements essentially compel medical manufacturing companies to hire numerous Compliance Experts who cause R&D to be artificially delayed by years or decades. If the FDA instituted cyber security requirements, delays will be longer. But, without an FDA mandate it's not going to happen because it's already VERY difficult and expensive to get the MEDICAL features right while jumping through existing hoops. At this stage, protection is all outside the devices, if at all. Good article. Looking forward to the followup.