System-theoretic process analysis for security for AI/ML-enabled medical devices