It totally is, and the computers they use should not have working USB ports on them.
This was the point of my reply. There's no technological fix when clinicians can't even safely open a read-only file.
Amusingly, I work with a rather large organization which still buys machines with PS/2 keyboards and fills the USB ports with epoxy. This is the state of security.