I am under the same problem and willing to enter a collective legal action against them. I have tech knowledge how security and transactions should work and I can help build the case that their problem is only bad management and not technical limitations.