To exercise great opsec, one would have to be a psychopath. Most folks aren't, hence at least in the US, banks aren't allowed to excuse themselves by customer's lack of opsec ("regulation E").

The effective monopoly that banks has gotten isn't free to them, even if they do try very hard to avoid paying the cost asked.