Boosty Collins@technomancy They're probably verifying account ownership by using Plaid to authenticate against her bank, this is a pretty standard thing.
Definitely doesn't feel good, and definitely *can* be abused (the highest level of access lets you access transaction detail for the account), but it's also.... normal. Which is not at all to say "good."
All GNU social JP content and data are available under the