So the argument is: medical devices yes, internet which is used for everything: no.

Not every jurisdiction in the world is based on extreme fines (like the US) but many are build on strict regulations (like most European countries).

Personally, i cannot speak about the concrete law and nis 2 thingy.