While plan fiduciaries should undoubtedly protect participants' confidential information, the scope of that duty is not entirely clear. By focusing solely on blocking access to participants' account ...