While Malcolm could cut Tommy off from access to almost all of his assets a trust fund, once someone receives it, belongs to the recipient and cannot be taken away by their parents.
During the discussion between Oliver and Thea, Moira's name can be seen posted under her room number. Having a patient's name posted outside the door can be a violation of patient privacy laws.