Perhaps people have faith in the disaster recovery routes their credit card / banks provide, whether it's well grounded or not.

What I want to know is why can't these financial institutions provide a read only username/password for users?