Cars were user-reprogrammable for a long time and the sky never fell.

Requiring that the pacemaker be outside a human body in order to reprogram it seems like a very sensible solution.