Why is the healthcare industry still so bad at cybersecurity?

Great starter article (it is long) about how cyber-security in health and medical devices has got to where it is - and the response since wannacry.