The case which happened to the stake user is definitely the fault of the user and not stake, so I am going to disagree with you when you say it's the fault of both sides.
Stake have done their best in providing good security features for their users, Stake still can not be the one to turn on those security features for the user, a user is solely responsible for turning on any of the security features he or she feels he or she needs, and leave the ones he or she thinks is irrelevant to him or her, if a user having good amount of money on his or her stake account doesn't find it needful to turn on 2fa for the safety of their funds, then whatever happens that leads to the user losing those funds, that is clearly his or her fault and not the fault of the Casino.
It's true that the gambler messed up by not enabling 2FA which would saved him from this mess, but it's also true that he wouldn't have to go through this ordeal if Stake's security stopped the hacker in the first place.
The fact is that a Stake account got hacked despite the site being one of the top gambling sites these days which is embarassing to say the least.
I play gambling here in the crypto industry, but I have never activated 2FA on casino platforms. Also, I don't have an account so far in Stakes, though as far as I know, it has 2FA, and besides that, Livecasino also has 2FA.
Maybe I will only do 2FA when I am required to activate 2FA to secure the account I have on the casino platform. That's the purpose of 2FA in a casino, so that you can't be hacked by exploitative people.
In general, I believe that such players who gamble with relatively small bets and, accordingly, small deposits do not need all this unnecessary fuss with obtaining access to their account using 2FA. In my opinion, 2FA itself was no longer invented to ensure the security of the user, but for the best methods of identifying him on the network in order to collect information about the user himself. And 2FA also has such a psychological effect on the user in the form of his complacency in the fact that no one will definitely be able to steal access to his account.
Well, maybe it’s only in this psychological complacency of a person that the benefit of 2FA lies.
But there is also harm in the fact that the person’s access pattern is revealed and in the fact that he does this voluntarily, and all this also takes away our precious time.