Biometric security is being added to EHR systems, but should it be implemented in all of them?