My bank gave me a PIN and a list of transaction numbers (seems to be standard practice in Germany). So I could theoretically let a Mint-like service read my ban

My bank gave me a PIN and a list of transaction numbers (seems to be standard practice in Germany). So I could theoretically let a Mint-like service read my bank statements without allowing them to transfer anything.