There are many systems that allow generating a API token to be used with other apps. The article clearly indicates that this school learning system, “Canvas”, h

There are many systems that allow generating a API token to be used with other apps. The article clearly indicates that this school learning system, “Canvas”, had such a functionality until it was removed during this saga, apparently by hiding it with CSS or something since there was an “inspect element” workaround to still access it. Plaid uses OAuth for many of their connections and doesn’t violate ToS in that case. There usually are TOS related to not sharing your password and disclaiming liability if you do.