Box CEO: Why the latest attempt by Congress on cybersecurity is already outdated