Theft of PI from Chinese facial recognition company exposes a much bigger issue.