You are uncritically repeating the party line from banks who claim it is necessary for security, without giving any rationale or supporting evidence, and coupling it with an insult.
The "party line" is not that holding companies accountable for security and also requiring them to be insecure is inconsistent.
The "party line" is not that holding companies accountable for security and also requiring them to be insecure is inconsistent.