I guess it depends on where you are. Here medical records are on a centralised computer system already.
At least on a centralised computer system one would hope that the state would hire someone competent to set it up and harden it. Whereas there’s only so much you can do to physically protect a piece of paper from being accessed—although I suppose also less likely that malicious actors would try to do a physical heist to steal paper medical records too.