If you want to feel better about those websites, Provident CU makes you pick a username with the same rules, including capitals and numbers when you register for online banking.

Someone in their IT department is the Grand High Idiot of Cargo Cult Security.