> I complained about this to my bank when I found out they stored passwords and their response was "don't worry about it - you aren't responsible for fraud".

I'd much rather live in a world where banks are idiots with passwords and I'm not responsible for fraud, than a world where I'm expected to be not an idiot with my passwords, and I were responsible for fraud.

Every day, I count my lucky stars.

Reminds me of when one of my subordinates applied for an apartment and as part of the process the property management people reached out to me to verify his employment.

How? By forwarding me his unredacted application chock full of PII. When I pointed out that most people probably wouldn't appreciate their SSN and more being shot around in emails by the management company, I was simply told it was "standard practice" for them. Following insinuations that their "standard practices" might just be "fucked" were summarily ignored.

> "don't worry about it - you aren't responsible for fraud".

Have fun trying to dispute an atm card transaction. The agent actively dissuaded me from doing it and said it was not possible.