I don't see how this changes anything? If they had attempted to do a production import of their live bank account, it would have been denied, same as what happened to their customers, and they would have caught it before the mistake affected real users.