This is a good example of why "we're not a bank" is more confusing than comforting. IMO Simple should just gloss over that part.
Edit: I would liken it to startups that are built on top of some cloud; I don't need to know that because ultimately I hold the startup responsible for their reliability/security, not their underlying provider.