Security theater. Serve the regulators, not their customers.
Must be. Banking is one of the least secure industries. It's harder to hack my GitHub account than my bank.
But, how? “Safety and soundness” is their guiding motto. 😆