From what I remember from reading my bank contract: they claim that any password sharing and blatantly insecure behavior waive bank responsibility.

It may not be enforceable, but in my case any use of Plaid or Plaid-like tool would allow bank to claim that they are no longer responsible for any fraud.

(for reference - I am from Poland, never encountered any nonscam asking me for my bank account, though banks have different variety of problems)