I believe this is indeed related to OAuth, but it should be addressable by either QBO or the banks, I'm not sure which. The reason is that Wells Fargo also transitioned to OAuth yet full details still come into QBO without any masking. I've confirmed that Chase and BofA are both masking.
