FHIR Security model is enterprise centric

NO! This is a false understanding. FHIR has no security model. And this is a good thing.FHIR is designed first and most important as a data model with a few expected interaction models (REST, Messaging, Document). There is expectation that many security models exist, and application of those security models does not impact the most important priority of getting the data model correct. This is especially exercised with REST, but is not limited to REST. REST is just used as...