I don't think it would have helped them much. If someone is capable of e-mailing new passwords from the account which had become compromised (as long as the account information had not been re-updated such as the password and security questions, and/or that the breach was due to an still-existent malware infection) then who knows what they are capable of! Maybe even capable of allowing detected malware classed as "Trojan.BankingMalwareDoNotAllow" to be allowed.
I really hope normal every-day people start getting involved more on how to stay safe online, and that a law comes through for most countries which makes it mandatory for all company employees to be given a course (even a short one would be beneficial) on cyber-security for their own sake but also a companies.
You cannot help someone who does not want to be helped, and security software goes well with common sense. Without that common sense factor, nothing will protect the user. It is a cold world, but if people really want to be safe they need to start becoming educated...