states passed medical debt protections. the new brief says patients mostly cannot get at them