u/General-Doughnut288

OpenAI just launched a finance feature. They're inviting users to connect live bank account credentials.

MFA is off by default. I have the screenshots.

I audited a free-tier ChatGPT account where the holder had deliberately disabled memory and chat history. Seven annotated screenshots documenting what the default settings actually are.

Here's what I found:

Model training is on by default. 'Improve the model for everyone' controls whether your conversations and uploaded files are used to train OpenAI's models. The account holder didn't touch it.

Marketing measurement and personalized marketing are both on by default. Neither was configured by the account holder. Data collection defaults on. Privacy defaults off. Consistent pattern.

Chat history was disabled. Storage showed 266 MB used. 846 files. 85 images. One archived chat visible in the UI from February. The file retention backend and the chat history UI are running on separate tracks.

And MFA, both authenticator app and text message, off by default. OpenAI's own finance feature announcement confirms this, stating users can 'enable multi-factor authentication to further secure your account.' Optional. Off unless you go find it.

They are asking for direct access to banking credentials on accounts where two-factor authentication is not on by default.

Screenshots are unedited. Captured May 16, 2026.

Full annotated evidence document:

Google is switching Gemini to compute-based billing. Your weekly cap now depends on how much processing each prompt uses. The exact limits aren't published.

I have 32 pages of documentation showing what the compute is being spent on. It's not your prompts.

The day before the billing announcement, I ran a paid-tier Gemini session for tax research. The thinking model rediscovered that a real federal law exists four separate times in the same conversation. Same thread. Prior confirmation sitting in context. Didn't matter.

The law is the One Big Beautiful Bill Act. Signed July 4, 2025. Publicly searchable. Gemini's own search summary confirms it exists.

The thinking traces show exactly what's happening. The model runs a probability check on whether legislation with an absurd name could possibly be real. Every single turn. It calls this its "sanity filter." It is burning your compute allowance convincing itself that existing laws exist.

It also burned compute maintaining persona settings. The thinking traces describe this explicitly.

I submitted feedback to Google at 11:53am this morning with the log attached. Screenshot of the submission is included in the document.

Under prompt-based limits this was a behavioral curiosity. Under compute-based billing with a rolling weekly cap, every one of those loops costs you.

The thinking traces are verbatim. They aren't accessible via Ctrl+A, copy/paste, any AI exporter, or Google Takeout. I copied each one manually.

Full log (32 pages)