Plaid used oauth for Bank of America circa 2019 when I tried, and currently uses Capital One's oauth when I try to log into it. I'm sure they use it when it's convenience (or maybe when the financial institution mandates it).