As a large company that serves millions of users in many of their most sensitive online endeavors, is it more responsible to throw your hands up and hope that m

As a large company that serves millions of users in many of their most sensitive online endeavors, is it more responsible to throw your hands up and hope that many of the hundreds of telcos out there will fix their own security, or implement a relatively easy fix that will automatically secure all of your customers from this issue regardless of third-party security?