Solving the "being human" part of security will probably never happen, which is why you're encouraged to do stuff like use 2FA, different passwords, service isolation and stuff like that.
Anyone and everyone can be fooled at some point, best to try and limit the damage.
Easy to see how this helps folks better afford their expenses.