It's a true belief for companies like Equifax, who can offload all of the liability so long as it's the criminal that is guilty instead of them. For Equifax, securing reads is worth very little because as long as they can A. stop competitors from using their data and B. have no liability all of their needs are met.