A large part is because that’s how your bank exposes it. There’s not that much granularity in bank account access.

Another part is they’re not going to tailor the terms of service per usecase, they’ll list everything they can do, then narrow it down per application