Why

Shifting the entire responsibility to customers is not proper business conduct. Compromised accounts can potentially escalate to neighbours, leading to even worse wide scale problems for even the most established providers.

There is also more business upside to offering protection than not doing so. Users appreciate good security and expect it, forming a powerful selling point feature. The probability only increases for customers affected by malware to be retained as a result of improved root cause analysis.