I totally agree - Plaid seems like a good existing but insecure "API" that most people probably don't care that they're giving their login info to.