Authorize.Net did not suffer from any sort of security...

Authorize.Net did not suffer from any sort of security breach whatsoever. If someone commits fraud in a physical store using a stolen credit card, the merchant would never hold the manufacturer of the card-swipe terminal accountable for that fraud. In the e-commerce world, a payment gateway is the equivalent.