Hi Perry, these are legit questions! Thanks for bringing this up. We have similar discussions.
Our initial version used the API key but we don’t need or want all access to your account + the method that bunq advises is connect. That’s why we switched to bunq connect. It would be great if bunq could give us more granular levels of access, and they are aware of this. Until then we can only use connect in it’s current form. This way our users have final control over the connection with Flow, in a more user friendly way.
Flow works best if you give the app access use notifications of your payments and do payments for you. So of course the app needs access to that.
Our first version will be built in such way that you can only transfer money between your own bunq accounts.
And yes, we have to ask money for this in order to build and maintain Flow. We want to handle security, user data, etc in a way you would expect a company would handle your privacy. If an app is free, you can always wonder why.