Assuming what Roku has said about how the account info was obtained.....the Roku customer is to blame.
I have no reason to think Roku is being dishonest about that.
QUOTE:
On Friday, March 8, Roku sent out a notification to over 15,000 users to inform them about their accounts being breached by hackers.
Roku explained in the letter that the hackers likely obtained user data from other data breaches and used leaked username and password combinations to access Roku accounts. After gaining access to the Roku accounts, the hackers changed login details and, in some instances, tried to purchase streaming subscriptions with the stored credit card information.
I take the precaution of not allowing my browser to save login info and CC info on websites that I have used my CC on.
I have a ROKU device and am not concerned about my account being one that was compromised. Nor have I received
a notification from ROKU.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”― Lawrence M. Krauss
If we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.