"We do not know of a single case where an IMD patient has ever been harmed by a malicious security attack."

Then what have they proven exactly?

Not to sound harsh, but that's like saying hundreds of nursery schools around the country are open to bomb attacks as they are completely unguarded. You'd have to be a pretty sick individual to hack a heart monitor, but you'd also be the first. Oh no, wait. They were.