7 List wrote:
In what other industry do you think this is being done properly? Banks certainly do their own authentication and authorization.
Banks have nothing to gain by deliberately failing or fraudulently attempting a transaction. Further, they're not exchanging money for a product or service -- the money is the product or service.