Re: My only question is ...
We do have a properly secured network with VPN and SMB is blocked where appropriate. I'm not saying we're perfect but we do better than most of the banks I previously worked for (I'm not in the network team but sit next to them).
However, we do read the data off these devices and store it centrally. Doctors may then review the data to look for patterns in the data which may indicate the effectiveness of a particular treatment.
I agree however that there's no need to allow write access over the network. While it could be convenient to update over the network it's just not worth the risk.