What I suspect happens is that Apple ensures that apps can not be interacted with automatically, and anything sensitive like banking moves away from websites and purely app only where the compute environment integrity is verified and bot free.