Why should they be careless with either of them, any service that holds customer data and funds have to ensure it is securely stored. Ledger lost their customer database many years ago, and till date those customers are still attacked through phishing emails. If you are going to collect data, ensure it does not leak, if you are holding funds, ensure you don't lose it to a hack, because the both are important and i am not picking one over the other.