Biden executive order on sensitive personal information does little for now to curb data market – but spotlights the threat the market poses