It's only added difficulty if you don't know what you're doing . SBS Standard is not something you want to implement if you have limited IT knowledge. That's where SBS Essentials comes in. While SBS Standard is difficult it's still insanely easier to implement than Server 2008R2 with the same policies and settings. Reduced set up time and greater efficiency if implemented properly.
Technical requirements for HIPAA are intentionally kept vague at the moment. With all this meaningful use and technological advance, I suspect things like P2P networks won't be allowed for much longer. Either that or they'll start checking for security holes and you'll be forced to find a solution.