They are not at fault in a moral sense, but the banks/CC companies have made it plain in law:

"Unless you swipe the card and get an in person signature, all liability lies with the seller".

Basically, Knight is being a bit of a noob.