"On the grounds of privacy it should be criminal for the agency authorised to fund medical treatments to store people's sensitive medical records related to treatments they pay for" sounds like a much less defensible proposition than "on the grounds of privacy it should be criminal for what is nominally the government's IT advice body to hire a bunch of script kiddies without proper vetting or any genuine auditing credentials to download said sensitive medical records, store them as insecurely as they like, cross reference them with whatever other sensitive data they find on the grounds that they might be able to use them to tweet dubious claims about waste"...
We can call anyone a script kiddie. I know some people who do data analysis for government health departments. Calling them a script kiddie wouldn't be respectful but they are youthful and do run scripts. The process appointing Musk is was more public and accountable than the one appointing my friends. Musk even gets public debate on the subject of whether hiring his people is a good idea or not. They're being very well vetted.
People are weird. I feel like a lot of ink gets spilled pointing out that one day the government will be controlled by people you don't like no matter who you are. But that argument doesn't seem to get through to all these people who panic every time it turns out that democracies don't always elect the same people with the same ideologies over and over. Government isn't trustworthy and people shouldn't be discovering that en masse in February 2025.