If only banks cared about state-of-the-art security.

In reality, banks couldn’t care less. They only care about checking boxes and don’t consider where these boxes come from; every unchecked box is a risk.

Did the latest sham "security audit" say that root is bad? They'll block it.