Attacks against 401(k)s are missing the point