Well, basically yes, but you have to understand that usually it’s just basic security standards, and they don’t always work perfectly. Plus, tech is always evolving and changing, and some site owners or business people stay updated, more about that here https://baddiehub.org.uk/file-encryption-keeping-your-shared-data-safe/, while others still believe that what worked five years ago will still be good enough today. So yeah, you’ve got some responsibility too.