@button TLDR: may be technically against TGCs but I'd trust Pocketsmith anyway (but not poli)
I've gone down a bit of a rabbit hole with this this morning, though not enough to just email the bank and check 😅. I'm not a super techy person but I spend time around some pretty techy, security...