Additionally, that tweet is wrong. BankID is an authentication system, and won’t give the 3rd party access to your bank account

One additional data point, with my DPO hat on.

BankID is both an authentication and user information service system. Swedish customers can sign up with BankID, and the beauty of the setup is that we are exposed to less private information than we otherwise would.

On login, these same customers go through BankID flow, and we get an assertation from the service that essentially tells us "login is valid for this previously assigned unique customer identifier".

This 3rd party app in question ( mobilt bankid) is also used to access everything in Sweden ( taxes, banks, social security applications .. )

Also: as a Swede, I must say, it works very well. It is also a closed source thing, but unlike this Stockholm Stad system, it’s basically a success story from the end user perspective. It’s great to have a unified, secure and easy to use way to access your bank and government services.

As a fellow Swede, I must say that BankID is one of the most blantant corruption schemes that have happened in this country.

It's a proprietary product that's not publicly available, and yet it's required for many governmental services. Obviously, it's a recipe for disaster.

For example, when Swedbank found out that I use some service at another company, they closed my access to BankID and told me that I either move that engagement to them or ask the other company (which isn't part of the BankID oligopoly) to somehow get BankID.

Even worse, there are some stories about people losing access to BankID for political opinions. That's China level of repression.