"In the US, where there is no such requirement - the only way to access the bank account is to emulate a browser."

Not entirely correct. In the US, JPMorganChase, Intuit, and others have adopted the OFX standard (consortium-based, which provides #2) as a more secure, controlled API alternative to browser emulation.