Why won't they? Such measures would cost them money and annoy the average customer. Unluckily most people have no sense for data security.