In Germany, the banking system had an open API, so you could even access your bank account from KMyMoney and do transactions. And you still had proper fraud protections.

How is it that accessing my bank account with KMyMoney is fine, but banks don't even allow me to access my smartphone's root account without blocking me?