The fact that banks do not uniformly have SSO and scoped cookies (so intermediaries aren’t required to store passwords with full access) is awful.