The recurring problem in medical premises is not weak hardware, it is undifferentiated hardware. Over years, access gets granted one request at a time — somebody needs a store during a busy week, a locum needs a room, a cleaner needs a cupboard — and the eventual result is a set of keys that opens rather more than anybody consciously decided. On premises holding patient records that is a governance issue as much as a security one.
The fix is a clear two-level structure. Everyday operating doors — reception, consulting rooms, staff areas, general storage — sit at one level and are issued freely to the roles that need them. Records, controlled cupboards and anything holding patient information sit above that, held by a small named group, and reviewed on every change to that group rather than annually.
Beyond that, the practical requirements are unglamorous: hardware rated for a duty cycle that runs around the clock, doors that latch reliably when somebody goes through them at four in the morning without thinking, and closers that actually control rather than merely return. In a building that never rests, reliability does more real work than resistance.