Unattended import would be downright impossible, as most financial institutions require 2FA (usually SMS, gross) to login. Plaid is often given the privilege to bypass this, either through special APIs or through very long lived session tokens.

Or in some cases, Plaid will literally ask you to input your two-factor code into their site upon login.