You are right, that is totally unacceptable! usually insulin pumps do need some kind of wireless protocol, mostly to communicate with the control unit. Right now the user needs to input some data through the control unit in order to control de amount of insulin that is released, or in order to avoid a recurrent dosis administration, when for example skipping a meal.
Some efforst are being done to actually communicate to continuous glucose monitors, so that the articificial pancreas will be built!, wireless will be needed.
What you may be seeing here is the birth of a new industry, just like computer security. We may be seeing contracters in the medical field specializing in implant security before too long. Kind of makes "penetration testing" seem like a very apt term.
The security concerns for hacking into bio-implants are real...but we need to put that into perspective, nobody has died yet...25,000 people die in car accidents in US alone, similar number die in US in hospitals due to wrong diagnosis or wrong medication...I won't mention wars or large natural disasters
As far as I'm concerned, internet connected configuration of implants is probably a rediculous idea. what you need is remote monitoring, but to tinker with setting afar I think not. Have a small hall sensor that can be enabled by a magnet to enable setup functions and have the actual setup via a 10 or 20kHz carrier system that only works from cm's away and you address 99,99% of the issues. Then for someone to kill you they have to be within a knife's distance anyway so it becomes a moot point. Internet reconfigurable impalnts is even more crazy that enabling the reprogramming of a car from a distance