coz where I live there is no such regulation, but banks still checks for root because of the support load concern
And you don't want a world where banks are not liable for such things, they have to be or they wouldn't spend any resources on their systems.