On the one hand it's the bank's fault for not speaking up and pressing a vital security issue. On the other hand it's Apple's fault for being an 800 pound gorilla which uses its market clout to force concessions from its partners. Stuff like this is why you always want at least two strong competitors in a given market - so if one makes unreasonable demands of a business partner, the partner is not afraid to tell them to go jump in a lake.
I like the looks of Apple Pay, and think it's a great move forward but even as an Apple fan, it seems bizarre for Apple to move forward on their own payment standard rather than the industry creating one. I mean, I know they did it so that they could skim profits off the top, and that they got away with it because they're worth 700 gazillion dollars and could probably make demands of the ocean, but I really wish this had come about via an industry standard.
Of course then, it'd probably suck.