Security and privacy advocates have long warned that sensitive medical data can be used to train AI models, or exposed personal data down the line.