> My guess is, as a bank, they're doing the right thing.

In my country, banks used to mandate use of a "security module". I decided to see what this thing was doing and caught it intercepting every single network connection.