Julian Sanchez: “Second, they are basically demanding that providers design their systems for breach.”