A little of the other side, no doom & gloom
Those medical devices running Windows? Not exactly an IoT thing. Many of them are large systems costing north of $500,000.
And the IT staff knows about deprecated OSes.
That's why those old Windows systems are walled off with access to only the network traffic they need to have.
Security may not be in the device, but it is around it.