They need to turn off Java on all of their systems to keep ransomware from locking their system. If a machine absolutely needs to run Java, it needs to be runnng the latest version and it must be isolated from the rest of the hospital network. A system locked by ransomware can be recovered manually, but it is a tedious process.
I worked in Hospital IT
The problem most likely isn’t in the IT Department.
Our HR & Accounting department insist on running ADP timekeeping & payroll using Java
It is a full time nightmare