I think there is still big missing piece: solving privacy. Nostr is public broadcast. People won't be comfortable broadcasting their medical data to the world, it has too many negative implications for them, ie insurance company charging more if they know.

Differential Privacy is interesting for this. I think it could help people control how sensitive insights can someone learn, rather than who gets access to their data. But I don't think its solved problem.