Same threat is in play when cross-border CBDC is implemented. I can't think about a scenario when I would be OK with a random state and random person accessing my financial data and nobody should be OK with this. Risk outweighs convenience.