Which is why the web is not a good platform for important applications like financial apps.

Better would be client-side encryption where the server does not ever see your keys, like Open Transactions uses for example.

-MarkM-