It's wild that the government supports businesses that write terrible software by charging people with felony charges for exploiting that software on their behalf. When do the companies bear the responsibility for the software they put out in the world.

Now the counterexample is that 'well this is no different than if an employee left the front door of the gas station unlocked and someone stole from it', but there has to be a line where if an exploit is so easy that all it takes is double scanning your card you should be able to use it all you want - it's on the company to do QC and fix the issues.