The Glasswing announcement was supposed to be a moment of industry leadership. What it actually revealed is that the institutions pay plans cannot tell you whether cybersecurity outcomes are something their executives are accountable for.