[adastra22]

I imagine that it is for either insurance or regulatory reasons. Someone upstream is nervous about the bank relying on a startup for its core infrastructure, and is only placated by knowing that the code is in escrow. They're not themselves programmers and don't know how useless the code would be without the institutional knowledge of the startup.