I agree with the basic difficulty you express, but I think there are a few clear areas to consider drawing a line in cases like this. First, mandate certain types of medical device makers publish certain types of repair information. Second, mandate that certain types of medical device must be supported for a certain amount of time, probably at least 10 years.