I have to imagine it's a lot easier to write a program that looks for a wallet.dat on my machine and mails it somewhere than it is to follow my steps into my bank account and transfer money.
Do US banks really let you do arbitrary online transactions with only a single password?