Any company guarding access to any large sums of money (or even small sums) should consider how people will get social engineered their way out of those funds. Encryption alone probably won’t save them.