Absurd Korean Internet Security Situation

Korean users, in the name of security, are practically the only ones in the world installing all sorts of weird programs for online banking and credit card payments (the US has absolutely none of this. Korea's ActiveX almost became a social issue, right? It even blocked Korean internet development.) But then, sensitive information keeps leaking from the companies, so why are all the inconveniences dumped on users, and companies keep getting hacked and leaking user data?

I've always thought that forcing users to use inconvenient programs is just dumping the lack of skill in Korean internet security technology onto the users. But no matter how much user-side security is strengthened, it doesn't seem to be very effective in the end.