Many healthcare systems lack even basic authentication, and some use factory-default or weak passwords like, "admin" or "123456."