This individual case is a medical device company in France, not some garage hacker as the title might imply. No human (except the engineers on the down-low) will have stepped foot inside the device before a very late stage in the design, possibly requiring approval for human trials, at which point all those risks will have been assessed.