What do you expect them to do, besides do what they're already doing? They can't prevent this, account security is the user's responsibility.