>the kinds of fraud models you'd expect from a web startup
Code written in Javascript by a fresh college graduate with no domain knowledge that you pulled from GitHub?
When evaluating a financial service the last thing I ever want to hear is that it's run like a "web startup".