Clearly the bank's customer has some responsibility here.

But it's not clear that the bank gave its customers the backup they needed in the event that an account is compromised. And accounts will be compromised.

Only the bank can improve the security of large electronic transactions. And if the bank is not held responsible, they have no incentive to do so.