"In recent years, DOL guidance that eased rules related to electronic communications to plan participants might have helped make participants more susceptible to phishing attempts that masquerade as official plan communications.... The DOL now appears to be attempting to strike a balance between increased electronic communication and cybersecurity measures."