I find it especially difficult to believe that Google has any moral qualms about extracting every bit of data possible.
I'm not saying they are, I'm saying it's based on trust and that trust has been broken.
But, extracting your financial information is so far into the boiling ocean of criminal prosecutions and mass customer abandonment, that they are heavily incentivized as an ad company, and operating system developer, to make sure that neither they nor anyone else can get that information.
That doesn't mean there can't be security gaps that could reveal financial information, but Google is the one looking to prevent them, and plug them when found, not leverage them.
If Facebook ads has it , don’t other ad systems have to compete ?
User data is more like nuclear waste whose identifiable storage must be avoided as much as possible.