Now let's talk about how much effort and what level of resources it's reasonable to expect a commercial entity to invest in extending protections to vulnerable people in need who happen to not be customers.

Perhaps we're asking the wrong entity to address this problem? This seems more like a public service infrastructure problem.