> To maintain that level of quality, we also need to be clear about our system requirements and avoid dedicating resources to troubleshooting issues on unsupported platforms and configurations.

This is such a corporate non-answer. If that was the problem, they could just detect the custom ROM and when someone calls support, the support agent could just say sorry not supported and hang up. I doubt that is the real issue.

One troubling possibility is that some security might be implemented client-side. Banks are ahead in security in some areas but far behind in others. Like in some cases you can just take money out of someones account if you know their account number, they rely on manual fraud detection, heuristics, and chargebacks. Instead of standard 2FA, my countries banks use a baroque parallel system. My password was for many years a word like "toast": It had a maximum length, had to be pronounceable over the telephone, was case insensitive etc.. Third party payment providers don't use something like OAuth but directly ask for my bank's password, and they used to just scrape the bank site, and so on.

But I think the real reason is regulatory, political, or due to pressure from the platforms. There is no pressing business or technical reason to go out of their way to block custom ROMs.

This is atleast understandable in the Europe given the geopolitical closeness to the US.

What to say of 'dumb' frenemy countries like India that tie themselves with a leash and hand it over to Google/Apple? More so with the new signing requirements for Android - which can be removed at a whim that would disable all UPI apps that manage a large fraction of the transactions.

These semi- colonized countries clearly haven't learnt jack shit from what was done to Russia and China.

This company is a joke. True story: someone working in their AI department told me they all got fired because AI is bad for the environment.

ASN has been dysfunctional for years. They needed a bailout and ever since have only deteriorated in their operations. To be fair, their risk management has surely improved and their new CEO is great. But their actual operations are superbad. They only do the easy loans and mortgages because anything else they can't do. Still I think as a bank they are doing well, everyone is opening accounts there. Marketing matters more than service I suppose.

If you change phone operator, there is number portability. But changing banks is a lot harder.

The EU could do what the UK did, which is making switching bank bank account automated for people (transaction forwarding, migrating direct debit authorizations, etc.). A lot of people might switch to more competent banks. I'm stuck with Deutsche Bank in Germany, for example. Switching would be a bit of a hassle. I'd have to make sure all the direct debit stuff gets changed to the new account (tax office, various insurances, etc.) all doable but it's a bit of friction. I'd be chasing different companies with forms, emails, etc. for a while.

There are a lot of user hostile banks that deserve to lose their customers because of their ineptness. The surviving ones would probably become a lot more service friendly. That's what competition does. German banks are particularly bad. I've lived in other EU countries. So, I have hands on experience with more competent banks.

Other European banks do it, too - N26 also rejects GrapheneOS.

The title sets a lot of blame on the bank, but there might be other factors at play. It is possible that either national or european regulations or laws makes it mandatory for the banks to comply with a set of security features that makes it impossible for them to offer services to degoogled phones. There might not be any alternative because it would cost too much money to develop and more importantly to distribute it. It can also be the case that Google uses its influence over the android open source project to make sure it will never be the case.

Luckily, Triodos (the other idealist bank in the Netherlands) still has an app that runs on Grapheneos.

Weird enough that nothing I do as a client should be able to compromise security of the bank. This means purely they have dirty under the rug