Regulators gave them a pass - heavily easing reporting of these Junk Banks, since data only needed to be provided in a prescribed format exactly ONE Time.
Inaccurate data submissions, Security interface protection, and IT instability... common excuses.
Operational Risk, yeah kinda high given the current environment.
SoFi is another example of Data Agg, gone wildly wrong.
Caught in many inappropriate and non-compliant use of their technologies, took its toll.