The implementation plan the Biden administration released on Thursday seeks to shift liability for data breaches onto "the biggest, most capable" entities. Does that mean banks?