Credit card companies have that policy because it's the law. Before it was the law, they didn't have that policy.

Debit cards are not covered by the same law. Some banks insulate debit card holders from losses, some do not.