Banks have been through this before.
Shadow IT spread because business teams could adopt new technology faster than governance could keep up. A team found a useful tool, deployed it quickly, and IT did not know about it until an audit or an incident forced the conversation. The pattern repeated across hundreds of institutions before most of them built the structures to manage it.