As somebody who has worked as a hospital software developer for years : yes, agreed. Ive been in contact with a few us based healthcare systems and they are often even less secure than the existing software, which isnt secure at all lol.
Hospital security has been a rising issue and needs to be taken VERY seriously. There is a shit ton of information in the databases that you dont want to loose, nor get leaked!