It totally is, and the computers they use should not have working USB ports on them.
Amusingly, I work with a rather large organization which still buys machines with PS/2 keyboards and fills the USB ports with epoxy. This is the state of security.
This was the point of my reply. There's no technological fix when clinicians can't even safely open a read-only file.