Any of the major banks consider breaches as cost of doing business at their scale compared to smaller banks. My bank prides itself on never having a breach, and it is insufferable to develop code for, but I guess it’s the price of security

That’s why it’s not surprising at all that a bank didn’t bother to do that. Banks have some of the most egregious security issues.