How do you think Plaid worked before banks got onboard with OAuth?

Can confirm. Plaid continues to work this way as well for many banks.

I have heard from someone who worked there that (allegedly) one of the banks had a huge PI leak that was exposed to Plaid customers and (allegedly) nothing was done because Plaid didn't want to disclose their unofficial use.