Legacy medical devices face growing scrutiny as regulators push for stronger cybersecurity, transparency and risk management.