It's more complex than that. Banks are also liable for security breaches, not consumers. Additionally, banks invest in a variety of security mechanisms that or

It's more complex than that. Banks are also liable for security breaches, not consumers. Additionally, banks invest in a variety of security mechanisms that ordinary companies, even major ones, do not invest in. Passwords are only one part of their overall security. I think all of this outrage over banks having poor password practices, while sometimes valid, is made by people not fully informed. It's like complaining that the bank vault has weak points that could be attacked. That's not all that's keeping your money secured.