This is why we have PSD2 in Europe. Additionally, there was a ruling somewhere that until a bank allows for a proper machine interface like an API, it must not actively block scrapping but the details on that are fuzzy atm.