Strange, Onion routing was already enabled for my domains. Sounds like at some point it became an opt-out feature, not opt-in.

A banking app allowing itself to run on rooted devices isn't a security issue.

That's so weird I'm not even seeing the empty placeholders.

This might be dumb but uhhh what ads? I've been using the app since launch and haven't seen a single one.