All software is faulty. Most of these sorts of devices (patient-facing medical devices) are divided into two physically separated pieces: the part that touches

All software is faulty. Most of these sorts of devices (patient-facing medical devices) are divided into two physically separated pieces: the part that touches the patient and the part that interacts with the other device. In the imaging case, the system that actually shoots radiation at the patient should have a hardware failsafe, opto-coupled i/o, clean power, etc. The software is usually written in C or something on an embedded RTOS. Data processing is usually done in Windows or some flavor of *nix running well-tested software.