There's a difference between a bank's threat model and a social media company's.