So, in other words, they're selling my data, just not to third parties. So when I go to click "connect to Plaid", now whoever I'm connecting to suddenly has every single transaction from my bank/credit card/whatever I just connected.

So still a privacy nightmare, just a slightly different one.

What's so hard about not selling my data at all, and not collecting any data except for what's absolutely necessary to connect A to B?