Hacking the hospital: medical devices have terrible default security

That’s rather speculative though isn’t it? To say that getting traction on fixing an issue is going to lead to a poor solution because you’ve seen poor solutions other places? Taking your password issue as an example, what about 2 factor authentication and other challenge response type systems? Why assume the solution is going to be worse than the problem?