As someone whose wife has a pump fitted ...
I can tell you there's a hell of a lot of security by obscurity going on here. Which is a direct failure of the process of oversight which should have mandated a set of standards and protocols to use across the industry, rather than allowing a free for all of hand-rolled APIs.
In fact, naively, I rather assumed that would be one of the main roles of a regulator. Otherwise WTF are we paying them for ?????????
The only saving grace for my wifes pump (intrathecal baclofen, so there's a feed straight into her spine) is the controller seems to be NFC based. You need to hold it over the pump to connect.