I think thst the goal of KYC is to get information about the entity opening an account, to e.g. make sure it isn't used for money laundering. Whether this account gets stolen later is out of scope for KYC.

Well yeah, you're only looking at the instances of fraud. You're not investigating fraud that never happened because it was prevented, that would be impossible.