That doesn't require a bank approved app - we already have authentication mechanisms that are standardized.

People do proprietary bullshit because they want to do proprietary bullshit. Anything else is made up.