Obviously they should regulate in a way that does promote free choice as far as FOSS goes. There is no technical reason to rely on third party apis, one could even argue that the banks are neglecting best security practices by doing so.