IMO this is one example of the countless stupid rules banks force on its customers in the name of security.

• No VPN
• Smartphone app only protectable with a four digit pin
• Access from rooted phones not permitted (but windows PC is ok)
• Maximum password length enforced

There are many more, feel free to add some mire stupid ideas.