If someone robs a bank, should bank not sue them? Because it gives them less initiative to increase security?

Security is a multilayer problem. Technology is just a part of it. Regulations and lawsuits are a big part of it as well.