With what I see with the new casinos, they're wrong with how they do it. They think that as long as they have established the website, the casino, the providers are done, they're all good to go. IMHO, that's not how it goes and all they have to do is to make sure that they also have a good security that protects the operation. It's not just all about the wallets that they have, hot, cold storage wallets that they have to protect but also their main operations and users data.
I agree, security must be the top priority of any casino, in fact. For their own credibility and community.
While the new casinos don't look at that importance and they're testing the waters. They are sacrificing the security of their casinos and players for the sake of testing.
While they've got funds as their bankroll and capital for the casino to run, they have to include security for the sake of their protection and as well as everyone who chose to gamble with them.