Everyone is excited about Open Finance expanding beyond just banking to insurance and mortgages, but the attack surface is going to explode. Insurance APIs are historically even less secure than banking ones. We need a unified security standard before we open the floodgates. There was a solid analysis on securing Open Banking APIs and the strategies for mitigating risks in third-party integrations: https://cybersecuritynews.com/secur...mitigating-risks-in-third-party-integrations/ regarding this expansion. It argues that API gateways need to be much smarter, using AI to detect logic abuse, not just volume spikes. Traditional WAFs just aren't cutting it against sophisticated botnets anymore.