The European Banking Authority (EBA) has proposed new cybersecurity guidelines that would oblige payment firms to place greater power in the hands of users in the interests of increasing transparency and avoiding unnoticed illicit access to accounts.