This has gotta be a troll man. They aren't responsible for poor security measures. They are only responsible for what is outlined in the thing they pay for. I'm gonna mute this thread purely because I'm pretty certain you're trolling for the sake of it. If for some reason you aren't trolling, take a business ethics and responsibilities course, there's some free ones online, or you could talk to a lawyer you might know, either one should help you understand.