That too. Although if they are making medical equipment, software (if you include the algorithms, which you should) is probably their main challenge. Everyone is not a software development company, but I agree security is every developers responsibility.