US banks are so far in the past security-wise that it'll take aeons for them to adopt something like OAuth; most of them haven't even managed things like using email or telephone calls responsibly.