At the end of the day it's the users fault for using coinkite instead of using actual self custody.
If you're trusting your keys to a corporation, that's your fault.