"unconscionable" that banks should be expected to understand security well enough to know that not using any verification was stupid? It was mandatory 4 weeks

"unconscionable" that banks should be expected to understand security well enough to know that not using any verification was stupid? It was mandatory 4 weeks before the launch, so it's been 6 months since then... and yet we're seeing how banks haven't bothered to fix it? I think Apple could have said something sooner, but in order to throw the word "unconscionable" around, I think that they would have to have done something deliberate or secretive. I view that 90% of this rests directly on the banks' shoulders for not implementing good security in the first place, then sitting on not implementing it for months.