Equifax will probably have to pay actual money to consumers as compensation for its sloppy security practices.