Is a generic, “cookie-cutter” approach appropriate for protecting people’s hard-earned retirement savings?