I find that quite amazing. There are a few services around that talk to UK banks, and every single one screen-scrapes to get it done (yes, including MITMing your auth creds) because the banks here would never implement a public API.

I've heard of a proper API once - it was only available to corporate account holders with turnover of £3m+ and the bank had to QA your code.

And yet when I took them to task for validating user passwords with `/^[\d\w]{8,16}$/` they refused to see a problem.