To be honest, I'm baffled at the fact that people think paper records are in some way better. Notice I said better. Are your records safer in a physical state rather than being online? Maybe. Is there more of a chance for an attacker can sabotage, utilize, or even manipulate your records in this fashion? Sure. But personally I'd rather allow the risk of my information being compromised for the sake of expediency (if that were the issue). And I'm saying this while working as a security analyst where I review vulnerability on a daily basis.