I really don't understand why they do this - what is so special about banking apps vs a banking site in a web browser.

What is the particular threat model of a rooted phone?