Smart healthcare needs better security to protect patients. A large part of the problem is how hospitals think about IT security.