Phishing Emails

[#1]

Just got one of these, slipped through Plus Net's spam filter. So called Halifax alert.
My question is this, why do all banks not take the simple approach to this that some have?
When I had a Santander account the information entered to acces my online banking was the same everytime which made it a simple target for phishing.
With my Ulster Bank account I am asked for a random selection of characters for my password etc. with each visit. This makes it a very difficult target for phishing because one person would have to fall for it several times in order for the people at the other end to get the login information. So why do all banks not take this approach?

[#2]

The three banks I use do this...including Halifax

[#3]

Did Halifax change to this system recently?
I cannot get a look at the fake "login" page because the link in the email doesn't work, some Russian address. vse4etko.ru

[#4]

No random selection for at least 18 months, have recently added a third level of checking as well.