I don't think that's right. The issue is a public communication one—people still don't seem to grasp as much as they should that agents can fuck up in serious ways. Banks blocking agents by default and then allowing read-only connectors is an easy solution.
The problem seems to be that the banks can't tell if the agents have been given permission by their users to access their accounts or not. Every big AI company is in the process of launching a proactive agent with access to everything. This is going to turn into a big issue.
