The new US cybersecurity bill will invade your privacy, but it won’t keep you safe