There are legal safeguards to protect patients from big bills like out-of-network air-ambulance rides. But insurers may not pay if they decide the ride wasn't medically necessary.