Plaid is an evil nightmare product from Security Hell

Plaid is a fintech company whose core product asks users to enter their bank credentials into a third-party widget embedded on customer websites — a practice that fundamentally undermines decades of online security education. The author argues this violates basic security principles, potentially breaks laws like the CFAA, and points to a $58M lawsuit settlement over data scraping. The post calls for regulatory action against Plaid and urges developers not to work for companies engaging in such practices.