Unfortunately, in a highly regulated environment like finance or healthcare this is the norm for opsec reasons. Can't have disgruntled laid-off employees taking revenge actions against the company or customers.
https://angeion-public.s3.amazonaws.com/www.PlaidSettlement....
Reached via:
https://www.plaidsettlement.com/important-documents.php
I will not, nor would I recommend anyone extend benefit of a doubt when it comes to this org in particular.
While you are factially correct in the general case, I'd hate for people to leave with the idea that Plaid has ever concerned itself with compliance when there was a buck to be made or an inconvenient norm to be worked around unethically.