When Philip Poniz opened Box 105 at his local Wells Fargo, he discovered it was empty — and that he was totally unprotected by federal law.