I think there's a fairly likely future that the banks and financial companies will try (and IMO succeed) to ban the providers of this data from using it for any

I think there's a fairly likely future that the banks and financial companies will try (and IMO succeed) to ban the providers of this data from using it for anything else. Aka: we will not use a biometrics service that uses our user's biometric data for anything other than fraud prevention and authentication. The banks are ultra-sensitive about personal data at the moment at least, but they really want these kinds of solutions to stop fraud without interrupting your user experience. They have the scale to demand vendors stay in a particular use case and I think they'll succeed. I would expect the future you're predicting to exist, but I expect it to come from e-commerce companies and others adopting tech from similar vendors but without demanding any restrictions on data use.