Cash has the protection that I don't get my wallet cleared because some JavaScript library got supply-chained.

Or less snarky: it's simply harder to steal something or defraud someone in meatspace than in the Internet, so less protection should be necessary.