I don't understand the threat model that banks worry about on rooted phones.

What is it? I can access their websites on a PC running as root or Administrator. What is the problem with rooted Android phones?