The title is a bit misleading. Apple Pay accounts or transactions themselves aren't inherently insecure...at least as discovered yet.
Turns out that some banks have opted out of some verification measures in the process of linking cards to Apple Pay , making it easier for stolen cards to be linked to accounts.
So there's some shared blame, as Apple could have mandated those measures. But, it'd be nice if banks just assumed that would be a good idea.