I work in the digital handling of PHI (HIPAA regulated) it’s pretty insane what is considered HIPAA protected in that world.

In practice, yeah, real people can’t just be all "oh, that’s a national secret, I can’t tell you anything about my work or the weird worms people had in weirder places…