Besides the fact that there are other services with less demanding security requirements,and othert methods of making payments (less convenient perhaps, but viable) there is always going to be a tradeoff between security and user needs. In fact if everyone understood security, ther would be no phishing and this would not be necessary, but companies are in business for profit or they do not stay in business, and change is inevitable. If you want poor security to help the poor, fine. Start a movement.