The sad thing is that the main risk is that banks use the same token for Read access as ReadWrite access to your accounts. There's no need for that; OAuth solve

The sad thing is that the main risk is that banks use the same token for Read access as ReadWrite access to your accounts. There's no need for that; OAuth solved this problem years ago.