When the service provider is liable for fraud losses they use the latest best practices. When the customer eats the loss they can just throw up their hands and

When the service provider is liable for fraud losses they use the latest best practices. When the customer eats the loss they can just throw up their hands and say you should have used xyz security feature.