We even had open APIs for every bank in Germany, in the form of HBCI and FinTS. With fancy things like optional RSA smartcard auth. The EU killed it all in the

We even had open APIs for every bank in Germany, in the form of HBCI and FinTS. With fancy things like optional RSA smartcard auth. The EU killed it all in the name of "omg, security!" (a total bullshit argument if you've ever looked at the specs), now with the new PSD2 the only ones getting proper API access are lots of shady payment providers, credit databases, data brokers and the like...