[drnick1]

> not all banks support them, of course.

And this is the problem. We should insist on standard web pages for everything, and never allow closed source apps on our devices. Native apps are far less sandboxed and under certain conditions make it trivial to spy on the user by accessing contact lists, other apps installed and more.

AFAIK the only Android derivative that has patched the most obvious security issues of this kind is Graphene.