>The ability of bankers or traders to even create an app that others can run, without any IT review/approval process is probable a compliance issue in and of itself.

Now worries! Its called the "citizen developer" today! :-D https://de.wikipedia.org/wiki/Citizen_Developer