There are too many breakout indie hits developed by one person or a small team that prove this isn't true across the industry.
AAA development may be that way because there are higher expectations, just like blockbuster movies invest heavily in special effects and A-list celebs. But at the end of the day gamers just want to be entertained.
The healthcare industry has as much incentive as the financial industry to maintain a high security environment. Fines for exposing PHI can be astronomical if a large number of records are compromised.
This is a new cold war that we've been in for a while now. Government backed hacker groups from foreign nations are constantly targeting high profile organizations. Healthcare, Finance, and Government are three of the top targets.