I wonder if it is even legal to use Windows 10 if you have to comply with HIPAA regulated.
I suggest using this incompatibility as leverage against this kind of data exfiltration. The only way a big company will change is when it hurts their pocket book. They might notice if enough businesses such as yours decline to use Windows 10 while complaining about this.
Of course, Linux is always a good choice, regardless of what MS is doing. If big players are already jumping to RHEL, now would definately be the time to switch.