This is an evasive answer.  OWASP and other modern security standards allow for tokenized connections to be made between systems so that users do not have to MFA every time. My QBO connection to my bank is not helpful because I am the only one that can MFA it to make it work.  My staff does not have access to my whole bank account but they must have access to the balance information in QBO.  Intuit needs to insist on tokenized integrations with your partner banks.  It feels like the early 2000s the way you are doing this.