From my perspective, this is not "don't use FOSS in medical situations" but "ensure the SDLC and code base meet requirements"

Unless we are talking foolish regulation, FOSS backed by taxpayer development money is likely to produce better and more open, transparent and testable code than proprietary companies competing against each other.

Government regulation perhaps should focus on building automated test suites as a first high level bar.