Yeah, I expect the banks to do their job properly, otherwise, I will simply decide to not have an account with them. I don't control what the banks do, I control what I do. I take a look at what won't get me in trouble. A bank can't force me to put my money into their safe. They can offer me attractive terms and benefits to do that, but they can't force me. And if I realize I made a mistake, and Bank A is worse than Bank B in terms of security and customer service - that's my mistake, not Bank A's. Bank A has policies and procedures of their own, I don't control those. Yeah, it's on them to have their ducks in a row before I become a customer. But having their ducks in a row - it's still my job to be informed on whether that's the case, it's not my job to walk in and hold them to that. certainly not until I'm a customer who depends on the bank having their ducks in a row.
Yeah, I don't need a PhD in cyber security to buy something safely from an online shop. Yeah, it's responsibility of the shop to demonstrate that it can safely sell stuff online. But even so, there are some minimal standards for people's attention. If you routinely miss red flags (like not using standards-compliant components that are up to date), you'll be restricted to only buying stuff from safe sources. It's on you to train your mind to pay attention to red flags and signs of trouble, and to know how to stay safe - that's what being an adult is. A kid cannot be expected to know signs of danger. You don't need to be an expert on fire to know to stay away from a hot stove. Yeah, a hot stove will give you a hot meal - if you know how to use it safely and not get burned.