It also calls for court-ordered changes to improve T-Mobile's cybersecurity practices and requires the company to be more transparent about cybersecurity risks and data breaches.