Agreed. I carry all of my health records on a very small USB flash drive in my pocket. Every time I show it to a doctor, they are scared to plug it into their desktop for fear of malware.
It totally is, and the computers they use should not have working USB ports on them.
This was the point of my reply. There's no technological fix when clinicians can't even safely open a read-only file.
Amusingly, I work with a rather large organization which still buys machines with PS/2 keyboards and fills the USB ports with epoxy. This is the state of security.