The SEC's dismissal of its fraud case against SolarWinds and CISO Timothy Brown over the 2020 Sunburst breach marks a retreat from cyber disclosure enforcement, following court setbacks and raising questions on accountability in supply-chain attacks.