The government says that when you hand over your data to a third party, you no longer have any reasonable expectation of privacy with that data, and that includes financial institutions.
Governments want that data as well and so it's not in their interest to create laws that are gonna protect your data. It's in their best interest to make it as easy as possible for these organisations to not have liability for handing over your data.
When you die, the only people who will ever know you worked late and never used PTO are your family.