Yes. It is the "ensuring the manufacturer can't be blamed if something goes wrong" mindset that says, "it's necessary ... if somebody did something illegal or dumb, they can be sanctioned".
Another approach would be to focus on patients and ignore punishments. Which is what the hackers are doing: ignoring rewards and punishments that are driving professionals in the field.
Another approach would be to focus on patients and ignore punishments. Which is what the hackers are doing: ignoring rewards and punishments that are driving professionals in the field.