As ambient scribing and RAG move closer to clinical use, the key security question is whether hospitals can control what the system hears, retrieves, and writes.