Why Healthcare Organizations Don't Need Best-in-Class Security Tools to Protect Themselves