Can banks offering Internet Banking expect their customers to have better Internet security protection than the banks’ own protection? Details and sources please?
Can banks offering Internet Banking expect their customers to have better Internet security protection than the banks’ own protection?

In this scenario the customer’s username n password were stolen via a keylogger following which the perpetrator steals the customer’s money. (How does this make a difference?) Can the bank insist that the customer’s security be better than its own? (I’m on the customer’s side)

Details and sources please?