If a bank cannot secure their mobile payments app without requiring the banning of all other apps from the platform, maybe it's the bank that should be shipping their own secure device.

Account holders can't afford that. If they could, they can also afford to get a separate mobile device that only they use for banking.