[nailer]

The bank should provide oauth, with 'see your transactions' as a permission you can revoke later.

Unfortunately, banks are technically backward and don't realise they're dumb vaults yet, much in the same way phone carriers are dumb pipes.