Legal remedies available: none.
The thing you bought is as functional now as it was when you bought it
Then, as now, it was vulnerable to some number of attacks, and if those attacks compromise your financial information, then that is a criminal act on the part of the attacker. Your agreement/contract/tacit understanding with the vendor in no way includes liability on the vendor for criminal acts of third parties.
Your theory is as daft as asserting that the people who made your wallet are liable if you get mugged and the mugger steals the cash out of it.
Biting the hand that feeds IT
