This is article is like saying the bank teller has some kind of responsibility to mitigate an armed thief emptying out the bank vault when the bank vault has no lock, no door, and no real form of security.
Up until now, the technology firms which creative this software have pushed the responsibility of security unfairly (and, imo, criminally negligent) onto their customers. This article just represents that the respective technologists need to actually do their job.