I heard stories of engineers using decades-old, unsupported and vulnerable stacks with the assumption that since it was already approved by the FDA they will have an easier time getting in though than if they tried to update their product.