[tgsovlerkhgsel]

In my mind, the software for at least the first two is typically written by people who don't primarily have an IT background, and at least in the past it was very clear that no skilled IT security engineers with any even reasonably recent knowledge were involved.

[slenk]

Not everyone can write embedded systems software. And I strongly disagree with medical devices. Peoples lives depend on them working.

[tgsovlerkhgsel]

I think the problem is that many software developers can't do embedded, but many electrical engineers can't do software.

Do you disagree that the software for medical devices is written badly, or are you just saying that it should be written well? I don't think the latter is in dispute. For the former, https://www.theguardian.com/technology/2017/aug/31/hacking-r...

[adrianN]

The truth is that embedded, safety critical software requires a set of skills that is not normally taught in computer science or in electrical engineering degrees unless the students intentionally specialize in that direction.