Healthcare providers and middlemen are exploiting a loophole in a 2020 law designed to shield consumers from surprise medical bills.