Sofort are problematic because they a) access your account via credentials that it's against bank ToS to share and b) they scrape and store (and likely sell) transaction data unrelated to the current transaction because they have access to your account.