> If I ran a bank and didn't bother to lock the doors or keep the money in a safe and someone comes in and steals the money, I don't get to do a chargeback and

> If I ran a bank and didn't bother to lock the doors or keep the money in a safe and someone comes in and steals the money, I don't get to do a chargeback and get the cash back. That would be one thing if physical security were just as hard (or harder) than cyber security. But it's in fact the complete and polar opposite; physical security is much easier and much better understood by the actors who need to engage in defense.