For failing to safeguard Social Security numbers, credit card numbers, and more, Equifax will pay up—but not enough, experts say.