Medical devices found to have low-level exploits

The Department of Homeland Security's Industrial Control System Computer Emergency Response Team (ICS-CERT), which works with different industries to improve cybersecurity, issued an alert for several exploits of medical equipment such from the manufacturer Siemens. The exploits are apparently very simple and an attacker would require a very low level of skill to pull them off. ICS-CERT issued recommendations for healthcare providers using the affected machinery to take some basic network security measures such as minimizing the machine's network exposure, isolating the machines from the business network behind firewalls, and using VPNs for remote access. These measures are certainly useful and should be in places at any organization that connects to the Internet, but what are the recommendations for manufacturers and software companies writing code for healthcare machines. It seems security is often an afterthought for these kinds of devices.