Garbage. It doesn't punish them, hold them accountable, or force them to improve their security practices.

Every breach like this should automatically require a $100 cheque to every affected account holder. Two nillion accounts compromised? $200M is a real consequence.