I really hope that scenario never happens, but if we get more Lulzsec like things we will get laws making sure everything is regulated and monitored.
Here is the whatweb output: ./whatweb https://online.citibank.com https://online.citibank.com [200] X-UA-Compatible[IE=EmulateIE7, IE=EmulateIE7], UncommonHeaders[jid], Cookies[JFPWebAppInfo,JSESSIONID], Title[Citibank Online], Country[UNITED STATES][US]
Looks like something Java-based. It's fun that sometimes software gets so large that they miss a gaping security hole like this.
I suspect telecoms would actually oppose most forms of regulation a government may be interested in, not out of any desire to protect their customers, but simply because it would decrease profits.