It's not necessarily changes to HIPAA, but how they protect the data and potentially their liabilities. Same thing is happening in many sectors. Everyone is trying to secure their data and preventing breaches. This isn't aimed at you specifically. But consider all the measures going on... VPN, geofencing, MFA... then there are the things you don't necessarily see (logging and analysis) VLANs, VPC, authentications, etc.

Think of the damage if you were compromised...Your laptop and phone stolen... the "bad actors" somehow got your credentials... A lot of peoples' medical records could be copied or modified (as an example). The healthcare system you work for could be "punished" in a bad way so they opt to secure things down as much as possible. I know some companies that scan their network monthly for vulnerabilities and have let people go for purposely creating vulnerabilities (some for convenience... like an open file share... some reasons just stupid...eg hosting a minecraft server within the corporate network).

As new vulnerabilities are identified, many companies will come up with a solution/fix to address them. They might be a bit kludgy sometimes, often inconvenient but it is meant for everyone's benefit.