It's not actually like that. They have a heavily restricted backbone and lots of little isolated networks hanging off it. This is lots of independent cases of idiocy causing infection.

Policy controls, poor patching and user education are the root cause of the NHS problems.