For those who might be interested, the Behind the Bastards podcast did an episode on Pullman and the issues associated with the Town that led to the strike:

https://www.iheart.com/podcast/105-behind-the-bastards-29236...

You're likely on the hook for the losses having shared your creds. May obviously vary from FI to FI.

If that's the case, why aren't FI's going after Plaid for impersonating their branding/login screens? When you go to link an account in-app, for instance, there is no indication that you're using Plaid; you're presented with a login screen that matches your FI's color scheme + branding. In fact, it's even more on-brand than the FI's own login screens, sometimes!

Many companies have adopted a one-size fits all approach, whereby the most restrictive legislation applies, regardless of jurisdiction where they do business. This reduces costs by minimizing duplication where possible. I suspect Microsoft's approach was likely driven in part by the additional costs needed to support two compliance regimes for their various products.