> The problem is that some of these neobanks suck too, e.g. N26 is a bit notorious for bad security (at least in the past).
In the case of N26, the exploits that CCC found were disclosed and fixed before the presentation, this was also a while ago now, 2016-17 maybe? I'm not sure what the situation is now, though.