You do have a point - all the adversarial attacks on ML models rely on full adversarial control on the inputs, which probably isn't the case with medical record

You do have a point - all the adversarial attacks on ML models rely on full adversarial control on the inputs, which probably isn't the case with medical records. If there was unconstrained access to a patient's MRI scans by an adversary, then I don't think adversarial attacks on the ML diagnostic models are the biggest problems you'll face.