Regulators designing, or at least mandating, an API isn't that weird a concept; for instance that's how PSD2 open banking works in some countries.