Yes, session cookies are generally secure, especially when used in systems that employ encryption and other security measures. However, it is essential to ensure that the healthcare application adheres to HIPAA guidelines and other regulatory requirements to protect patient information. Proper session management, including automatic logouts and secure transmission of cookies, is vital to maintaining security.