Comment by krzkaczor

I think access to bank APIs is a similar space. Companies like Tink or Truelayer used to rely on credential passing but now with the wake of open bank apis (PTSD2) they are implementing standard oauth flows. That being said, I think that the biggest entry-level problem in that space is an enormous level of regulations regarding bank data. You can't even start using their API without your app being validated by them.