The regulator’s case against HSBC moves the needle from customer beware further towards bank beware.