Sure, just remember the S in IoT stands for security and IoT devices are just embedded devices connected to the internet.

And the Medical industry is the proof for the rule.