The problem is that companies who get hacked, which is obviously their fault, don’t get punished enough. Then they implement things like two factor authentication, require increasingly complex passwords and make you change them every six months. Basically they put the onus on the user instead of maintaining adequate …