Good idea, but the time between announcement and deadline is pretty short. Hopefully this doesn't delay anything for redesign, and kill anyone who needs the device sooner than they can update it.
Every impediment to getting a new product on the market means people live without that product. In the case of medical products, that can have real consequences.
Assuming you are not on the MIT campus, the odds of someone hacking your medical device is practically 0%.
I have heard that my wife's diabetic Freestyle Libre 2 Continuous Glucose Monitor (CGM) was not able to be used with my phone because of security concerns. That meant that this disabled woman could not use her phone to check her blood sugar with the new Libre 2. So she used the outdated Libre 14-day. (Yes, the 2 is newer than the 14-day.) That meant she did not get alerts when her blood sugar went too high or too low. That had real consequences for her. All because someone wanted the software to be 100% hack proof against unrealistic scenarios.
Why not use the laws on the books? Anyone who hacks a medical device needs to go to prison on felony charges.
