I manage a team of devs in the healthcare industry, I've worked in other regulated industries and healthcare is unique. I could go on forever but it comes down to the fact that healthcare is uniquely risk averse, for understandable reasons.
Risk tolerance is an orthogonal issue. The point I raised is about operational inefficiency which has no impact on risk (in terms of legal compliance or patient safety) one way or the other.