The bank can always say their IT systems is not compromised. No bank customers will have access to audit and scrutinize the robustness of a bank's IT systems. Or how many people in this world actally have the expertise to do so even if you are given the access.