I understand that the company is protecting its liability or whatever.

The company can do that by training your boss not to ask questions related to your health.