Because you can't prove damages. If you suffer loss that you can directly link back to Equifax, and you manage to get your day in court, you'd get damages just like if you had a faulty steering wheel.
The problem for the law is that things are much more indirect in this case.