Looks nice - really - but I wouldn't touch you till you got external validation of your security practices and shared more about what you do there on your FAQs. Encrypting access tokens is just table stakes. My finances are private and not to be trusted with just anyone. The folks you compare yourself to have that type of certification but it's not listed in the comparison.

Even a SOC type 1 would show you're on the journey.