From the paper: "In any case, security economics teaches that you’re unlikely to get a secure system if Alice guards it while Bob pays the cost of failure."<p>This problem is nothing new. All that changes with 3DS is that Carol pays instead of Bob.