I'm pretty sure we broke one of our bank client by telling them that data import will be exclusively with SFTP. We ended up allowing FTP (and thus our security certification was voided).

It was a Euro bank though, but it was barely two years ago.