VLAN on it's own isn't usually considered sufficient for separating data in different security domains (or business impact levels for the old guard).
Patients and visitors are essentially untrusted Vs staff who are (in theory).
VLAN + something else (802.1x etc) would be ok but adds to costs and complexity and somehow I doubt Hunt got much past "yeah wifi!" in his thinking.
Biting the hand that feeds IT
