Yeah, one of my friends works in a bank. I called him to get some information about my account, and he just gave it to me. No password or OTP was required.

They have access to everything. It's pretty disturbing when you think about it.