In some cases password (private key) as sole and sufficient method to have full control over asset, executable by anyone is a problem not a benefit.
You can't just login to paypal from another IP. You can't just login into most emails these days ( 2FA)
Crypto wallets have none of those protections.
Other than that:
EOS (dPoS) reversed transactions multiple times while being top 10 at the time: https://cointelegraph.com/news/eos-reverses-previously-confi...
Ethereum Classic was attacked multiple times with chain reversing double spends due to not enough energy being committed to immutability: https://www.coindesk.com/ethereum-classic-attacker-successfu...
Ethereum reversed the "DAO hack" with a hard fork.
Which is simply not true, there at least 100 Wallets just in the Android Store. You think none of them has some kind of additional protection?