This is similar to Brazilian banks too. Both public and private.

They stoped using ActiveX in the 00s but then started requiring the user to install some rootkit-like security software that was nearly impossible to uninstall and was probably able to spy on users.

Now they some of them have an app that is basically a bundled browser accessing their regular website.