Why can't I use my bank's app, which I presumably already trust, to tap-to-pay? Why should there be a third party involved at all?