Earlier quoted context omitted.
They've stolen the merchant's money if it was an online transaction. Bank only takes the fall for card-present transactions.
The key is that it's somebody else's problem, not yours.
Personally, I think they should, because they have access to the aggregate data that could prevent more of it.
Because they take no hit for online fraud, however, they do almost nothing to make things better.