I do not speak with any authority on this, all I know on this subject I read on HN, and I only speak for myself: I've read that the FDA is starting to talk about security of devices on, for example, hospital networks, and that manufacturers are starting to think about it. And I haven't read, or know, a thing about implantable or other personal devices.

tldr: I don't know.