A study of 17 major banks by the University of New Haven Cyber Forensic Research and Education Group shows that six of them have weak password handling and that their password procedures are weaker than most social websites.
Not every parking lot or garage is the same, nor do any have the same needs to mitigate risks. It all boils down to a fundamental but complex word that underlies most all security mitigation and litigation: reasonable.