Drugmakers that are doing nothing to prepare for California's track-and-trace requirements in the hope that Congress passes legislation to preempt the state law could be taking a big gamble.