EU-Gerichtsberater sagt, Banken müssen Phishing-Opfern umgehend Geld zurückerstatten

The headline is clickbait. Per the article: the opinion consists in saying that banks have to give back the money but have the right to pursue for indemnification if their customer was acting negligently. 

So in other words:
1. Customer falls for a scam
2. Bank refunds money
3. Bank sues customer for gross negligence 
4. Court sides with bank (since the transactions were authenticated and customer has handed out his credentials) 
5. Bank gets money back 

Sounds like we are just adding legal costs for someone who’s been duped.

Also: imagine being compromised a second time after step 2