Protect them from themselves no.

Protect their password as much as possible when interacting with your web app/website I would say yes.

I don't think about it as a responsibility rather just a nice or the right thing to do.