Non-USA person here, I am amazed that this is even allowed. Giving your username and password to a third party? Think about all the security problems, like creating a fake Stripe. You are basically trusting every website you use. In my opinion, there should be a free and open protocol between banks for payments. Where you get redirected after you clicked on the pay button.