Plaid is handling the credentials, and they work with banks with their cooperation. This is FUD - it’s no different from accusing projects using Stripe of hoarding credit card numbers.