I'm not defending that madness, but that device doesn't show who is the recipient. The argument was that this is protection against phishing sites pretending to be a bank, proxying your connection but sending it to a different recipient.

Makes one wonder how much the user has to fuck up to end in such a scenario, and of it's really worth transmitting everyone's financial data in almost plain text over the air for this