HIPAA is much less protective than people think, but "the law allows this thing you hate" isn't going to make people hate something less