“Customers … are responsible for any activity that occurs when those devices or passwords are compromised,” Coinbase told Ferguson in an email, according to the court filing. It added, “Please note you are solely responsible for the security of your email, your passwords, your 2FA codes and your devices.”