alt Hacker Newsafaik up to 2020, IE and ActiveX was required for online banking. Past that I heard you had to install a local webserver that the browser could communicate with. I'm not sure if any security issues are mandated by law, but it does sound like a minefield.
There's still a whole business sector selling snake oil "anti screenshot" software and such to banks and government agencies and such (complete with vulnerable kernel drivers of course). They learned nothing from the ActiveX days.