Glad you mentioned the hardening aspect, because that’s definitely something I would have to consider. My adoption of cyberware is based on the assumption that the systems have been hardened against run-of-the-mill hacking (although probably not immune to Netrunners), and they would have to be something that doesn’t require a warranty or ongoing “rental” fee. There would always be updates and new versions of course, but the original systems should work at the installed level until they are damaged or their owner dies. A “Repo Men” timeline (where organs are repossessed if you can’t pay for them) would make me very reticent to do cyberware.