It comes down to who gets stuck holding the bag if anything happens. As long as it is easy for them to blame you or me for being careless with our account info, they will not tighten security.
...but the customer is very rarely stuck holding the bag. If you report a transaction as fraudulent you get your money back usually within hours...not really sure what you're on about.