Heh. Remember back in the day when pacemakers were being hacked remotely because admin passwords weren't even changed from the default, on top of outdated wireless protocols? Oh right that's today!
Hardware makers often aren't good at software, not to mention software updates. And even that gets wonky, like when Microsoft update got hijacked.
Point is, if we can't get IoT 100% right, or even 90% right, how can we trust IoT with physical interfaces into our bodies? That's the problem. And then what happens if the company who made your implant goes out of business? What do you do when those updates stop? Look at cellphones, supporting a cellphone for 2 years is too much for most hardware makers, they rather never update it.
Point is, even if the tech is 100% possible, we're way too far from business setups that allow for this to happen.