Plaid is criticized because it’s a public-facing mechanism for third-party access into your finances, but many companies already have access without you knowing. In the US, many banks share nonpublic info such as transactions with retailers, marketers, government agencies, and others. They’re allowed to do so under the Gramm-Leach-Bliley Act. Report from the GOA:

https://www.gao.gov/products/gao-21-36