That is true and I think the companies behind the Oses must communicate that to the average Joe! They must be forced to take their responsibility and more proactive rather than reactive.

it's not total security I'm looking for but increase the awareness and improving the security.

If a company is compromised on the level that affect the public users they have to admit(forced by law if necessary) it publicly and the extent of the breach. This would be a great first step world wide!