Not trying to be a hater, but that analogy isn't quite right. The web designers didn't leave their door unlocked. They invited Meta in, put their laptop in Meta's hands, and then said "Please take this. Enjoy." They weren't idiots. They chose to give Meta that data deliberately.
Medical institutions need to be held to account as much as Meta does for everything they do. I agree with that completely.