Plaid is a valid service that helps glue bank APIs together. Why should it be avoided? I am not arguing your point strictly. But the problem in general can onl

Plaid is a valid service that helps glue bank APIs together. Why should it be avoided? I am not arguing your point strictly. But the problem in general can only really be solved with education. Users should always know who they’re giving credentials to. A technical measure like not allowing keyboard input in a full screen browser is a leaky stop gap. The full screen app could just as well show its own pixel perfect full screen keyboard and trick users to tap it.