Most financials do have relatively good security; unfortunately, that's "good" relative to the baseline of "incredibly terrible". It's hard to think of any large organization connected to the Internet that has a security program you could objectively call "credible".