I don't think this is still the case?

When we built our Plaid integration it used OAuth and a redirect. Plaid just got an access token, you enter your user/pass at bank side.

Edit: Seems like smaller/local banks are probably the ones that won't support OAuth. We didn't support those.