There's PSD2 in the EU (or Eurozone? Not sure actually). Basically forces banks to open common APIs to encourage interopability and competition. However, it's not aimed at users but rather at companies in fintech building applications.
Some banks (Bunq comes to mind) offer APIs to their customers for direct use, but most don't. The reason is obviously security. People still fall for phishing, people still give fake bank staff their access codes on the phone. Giving normal users a way to have API access to their bank account would be disastrous for many of those users.
Now, it would be nice if things like PSD2 were a little more accessible and transparent. Currently you need permission from an institution like The National Bank to gain access. It's expensive and bureaucratic.
I know this isn't a silver bullet solution to supply chain attakcs, but, so far it has been effective against many attacks through npm.
https://docs.npmjs.com/cli/v8/commands/npm-config