I think the obvious solution would be to invest in a new open-source end-to-end infrastructure that could be thoroughly audited then implemented by hospitals everywhere.
Of course, that would need a sizeable investment of both money and time, but it would almost definitely be more efficient than updating one component at a time.
My armchair analysis of the obvious solution is to airgap all these systems. Perhaps this would require some new infrastructure in hospitals, but it would add a very difficult-to-penetrate layer.
That's one part of it, but the real innovation in remote care is RPM devices (Remote Patient Monitoring). These can be anything from blood-glucose sensors, dialysis machines, blood pressure sensors, etc, that have an internet connection and send data live to a physician or nurse.
The struggle with these devices is that they're often cheap embedded systems that never receive firmware updates, so they do present a security concern. However, they're also immensely useful and have without a doubt saved lives.
Yea so that won't happen.
Hospitals don't audit anything for real. The hospital admin just hires their buddy to rubber stamp junk and gets a kickback.
The actual software and hardware solutions too are based on who gives the best kickbacks to hospital admins and doctors.
Thats it. That's the American healthcare field and why its a complete shitshow.
IT staff is made to deal with decisions they have no say or power in and turnover is quite high.
Of course, that would need a sizeable investment of both money and time, but it would almost definitely be more efficient than updating one component at a time.