I can see concerns about it becoming a widely used form of SSO, potentially even mandated, and that destroying privacy. However, banks and credit are cases where you already do not have that privacy, so they don’t seem like a very compelling example to point to.