While I agree on the security concerns, end users will most likely continue to use it as there’s no other current method for some of the functionality they prov

While I agree on the security concerns, end users will most likely continue to use it as there’s no other current method for some of the functionality they provide. End users make these decisions all the time and if you think the average user is looking to see if their connection is TLS or even at the certificate I’d wager you’re very very wrong (2-3% at most would be my guess). When given the choice between less security or more functionality end users will typically choose more functionality (how many users did the same with mint). The breakdown imho is banks are slow to adopt new standards, not because they’re so concerned about security but because their infosec dept is small, other priorities or in a lot of cases the entire function is outsourced.