> Giving your online account credentials to access your banking information is complete madness. It's a giant security risk

Is it? My bank requires multi-factor confirmation to set up a new payee for electronic transfers and sends several emails for any transfer. You couldn't actually steal any money just by having online banking credentials.