And it's fine, because the regulator forces them to take the risk. As soon as the risk for having to own unauthorized transaction becomes to much for their curr

And it's fine, because the regulator forces them to take the risk. As soon as the risk for having to own unauthorized transaction becomes to much for their current auth schema, you'd find it replaced faster than you can say CFPB.