Keeping this in the context of devices like a pacemaker, do you really believe that an open-source development model would be safer for the people who depend on it than a closed-source model? Do you expect them to flash custom ROMs to the pacemaker that keeps them alive if it turns out there may be a problem with them, instead of going to the hospital to get the thing replaced?