I, frankly, do not understand why Plaid doesn't work more like Privacy.com. If a company must have the ridiculous stance that they need to access my bank account, and Plaid is linking them together, why can't Plaid have a popup saying, "Company X will access your Bank account. Company X may not withdraw, at any time, more than $25 or <fill in the blank amount here> without your consent on a monthly basis. You may need to fill this form again if you ever purchase or subscribe to anything requiring greater amounts of money transferred. < OK > < Cancel >"
Someone might say, "that would make Plaid require a money transmitter license" or something similar. I would argue, why should Plaid not need a money transmitter license for literally handling bank account login information?