Right. Specifically all modern EHR applications now support DirectTrust Direct Secure Messaging. This is basically just regular email with standardized encryption and other added security features necessary to make it HIPAA compliant.

https://directtrust.org/what-we-do/direct-secure-messaging