Your sense of security is somewhat unfounded. In the US if someone breaks into your online bank account and steals all your money, legally you're on the hook for the loss unless you can prove the breach occurred on the bank's side.
> if someone breaks into your online bank account and steals all
> your money, legally you're on the hook unless you can prove the
> breach occurred on the bank's side.
Right, but that's not a valid comparison to what happened.
If someone broke into your account, yes, you'd need to dispute the charges and prove that you did not drain the funds to your new Swiss bank account.
In this case, though, it's not an account that was broken into, but the exchange itself. If someone robs your bank at gunpoint or hacks into its backend servers, either way, you're not liable for the loss -- they're insured.
Individual security vs. organizational security are different in this respect. In fact, I'd argue that the individual security of bitcoin exchange accounts are even riskier than the exchange itself getting hacked: if your bitcoin wallet is compromised in any way, that money is gone forever. No one can do anything to get it back, and if the exchange wasn't compromised, they probably don't care about your terrible password (or malware-infested laptop, or compromised Internet connection, etc). If your bank account is hacked, and you report it, it's not your problem anymore.
