Tailscale may have given them a custom solution. If not it'd be pretty irresponsible to run it the way tailscale runs right now in a banking situation.
You think banking cyber-security is waaaay better than it actually is. Many don't offer 2FA and require password lengths that can be cracked in less than a week on decade old hardware.
