Loading JavaScript from an external website is not "just someone making a stupid mistake".

It means they don't have their security in order, they're a bunch of amateurs and their banking license should be revoked.