This is as good a place as any, but either no one really has much to add or no one has noticed. There was a recent discussion regarding a bank that was setting up an on-line banking product that did something similar. Personally, I think it is a real dangerous practice for these companies. Unless they have lockdown type security on this information, I think it opens them to substantial liability.
The opinions expressed are my own, take them or leave them.