Surely it couldn't be as bad as an unnamed Queensland (Australia) bank that did client side authentication by looking up the username and password if one giant

Surely it couldn't be as bad as an unnamed Queensland (Australia) bank that did client side authentication by looking up the username and password if one giant if username == "user1" && password == "password1" return true; else if username == "user2" && password == "password2" return true; else if ... Yes, that was real.