And the only one time where I have seen this (in a private discussion of the mobile app with a bank employee), they said that they see no valid use case for a m

And the only one time where I have seen this (in a private discussion of the mobile app with a bank employee), they said that they see no valid use case for a managed MitM against their production website. Preventing proxies like Charles and mitmproxy from working was one of their explicit goals for the app.