How do they talk to banks and what is their security policy? I've found that they use Finicity (https://www.finicity.com/ https://www.finicity.com/) for API an

How do they talk to banks and what is their security policy? I've found that they use Finicity (https://www.finicity.com/ https://www.finicity.com/) for API and are stating that only a limited number of engineers have access to the DB (https://www.youneedabudget.com/security/ https://www.youneedabudget.com/security/). Still, would love to know more details on the security policies and infrastructure that are kind-of glanced over.