> If it's not a problem, can I have read-only access to your financials?
Have you built a product like the OP and demonstrated that you've put a lot of time/thought/etc into the infrastructure? If not, then it's a clear no.
Also the credentials, etc are going to Plaid (and even with that, my few Plaid integrations have all been OAuth lately), not this company. This is exactly like Stripe. I'm not giving anything "sensitive" in terms of transactions to this company regarding bank details.