I just tried signing up for Mint.com and was astonished when it asked for my banking password; I thought for sure they had some sort of better arrangement than that. If Mint is signing into my bank account directly, rather than using some sort of secure API to access it, then that must mean they're storing bank account passwords in plaintext, does it not?
I am certain I must be wrong, as this would be preposterous, but I would really like to hear if anyone knows how this actually works before I give them that sort of information.