Your personal email account is probably a million times more sensitive. It contains enough personal information to get your identity stolen a thousand times over, and once your email has been compromised there is no way to ascertain the damage.
I'd be much more worried about my email getting hacked though.
Huh? The worst case scenario of your bank login details is... someone depositing all your money to their account, surely.
But... In Europe thanks to just another EU laws we should have every bank offering an API access for everyone starting from September 2018 IIRC. That would help a lot with automation, I hope generating few api keys with different access permissions would be possible with that.
I'm fully expecting banks to throw extreme security hurdles and probably registration fees in the way if they can.
Hopefully I will be wrong.
I wish they had an API but I just use a selenium script essentially. Luckily(?) logging in to this particular account only requires user/password and no fancy codes etc. I guess when the system is built with readonly default and OTP for anything else, then the login can be kept simple.
