But your point about not trusting an app is the same. At some point you’d need to trust some app.

If your problem is the bank’s app something like PSD2 will solve this by allowing you to connect to the bank directly and having your own app, right?