Royal bank of Canada uses a single 8-character alphanumeric password for online banking, and that login is also good for identifying yourself for government services (e.g. Tax services). I still can't believe it.
Raise the point that forcing insecure practices on government operated financial sites might be a case of illegal negligence.