Tangerine still does this. I’m honestly surprised I don’t hear stories about account compromises with them. Likely a ticking timebomb though.