@samhenrigold I can't tell if this is to be provactive, or because you really don't know.

In case of the 2nd, doing it in this annoying way provides multiple important security features: privacy, auth, and delivery confirmation.

The bank knows the message is private, because it never left their own system, they know it was delivered to you, because they trust the authentication used to access their web ui, and they know if and when you accessed (and presumably read) the message.

🧵 1/2...