Yeah. TD is so tired of them they have a page warning customers about them, without naming names:

> When using a fintech app, you may be providing your confidential TD username and password directly to third parties over whom TD has no control. Please be aware that the sharing of your TD credentials is contrary to the terms of our agreements, and TD will not be responsible for any harm that results from the sharing of your credentials.

https://www.td.com/us/en/personal-banking/security-center/fi...