What banks have essentially done is put ATMs in people's living rooms. The security is only as good as that of the home computer.
If you are a determined bad guy, you will find relatively easy ways to avoid detection. The good news is that most bad guys are not clever and not determined.