Financial services firms aren’t gonna sign off on this due to liability and cyber risk (fully permissioned financial identity auth token loss could equal substantial asset theft), and they won’t provide it themselves unless required to by statute or regulatory rulings. It’s possible there’s eventually enough uptake for Realize to convince those they integrate with to provide endpoints with read only scoping. Fidelity in particular seems to be running quick from a tech transformation perspective, making them more open about sanctioned integrations.
Europe got this right with PSD2, the US will catch up eventually.
https://en.wikipedia.org/wiki/Payment_Services_Directive