But in terms of using those platforms - you likely log into your bank via a chrome-based browser or Edge. Even if not, you are still running a browser on their

But in terms of using those platforms - you likely log into your bank via a chrome-based browser or Edge. Even if not, you are still running a browser on their platform. Why not scrape financial information from another source such as disk storage or by monitoring network/crypto API? If the platform vendor turns malicious, why presuppose they will only alter the behavior with respect to their own apps?