It may well be that from a business perspective a greater threat to banking is coming from insiders, failing systems and incompetence than from outsiders exploi

It may well be that from a business perspective a greater threat to banking is coming from insiders, failing systems and incompetence than from outsiders exploiting TLS weaknesses. To those wondering why banks are worried about their employees communication even internally keep in mind that there have been very expensive judgements related to banking employees conspiring to break legal or other regulatory rules. The alternative namely monitoring on the end points is hard to implement comprehensively and a lot more expensive. If (and that is a big iff) the banking use case really justifies a special and weaker transport protocol then maybe it should be upon the banks bear the whole cost of doing that. It would also clearly assign the responsibility when things may fail from a security perspective. Maybe the end point alternative looks then more attractive.