> Stripe needs all that byzantine fraud prevention, on top of what they had a decade ago, because they are a huge concentrated target.

This is not true. Every payment processor needs this effort because as soon as you broadcast that you're a payment processor you're going to get about 3-5 scammers a day.

As an aside I really think Mercury bank should audit their onboarding process.