1) You should be defining a strict CSP and a few other headers given that this deals with financial information: https://securityheaders.com/?q=https%3A%2F%2Flunchmoney.cc&f...

2) When trying to give provider info, I hit an error both times (with different financial providers) on the Plain screens.