Sure, but in theory I can change passwords and maintain separate credentials for my banking-related needs. Short of auditing the Solidity contract code myself,

Sure, but in theory I can change passwords and maintain separate credentials for my banking-related needs. Short of auditing the Solidity contract code myself, there's nothing I can do to protect myself from the hacks themselves because the very mechanism by which money is transferred is riddled with bugs. This is mostly just semantics anyway - I'm just trying to establish that writing money-transfer software in a poorly designed language is, one way or another, worse than writing a web app in one.