Can Congress do anything to address SS7 risks? Some say yes