Your reply doesn't make sense. He said they won't fix it. You said he's wrong because he's not thinking about fraud. But not fixing it is better for preventing fraud anyway. So you both basically said they won't fix it.