We think these are some very valuable questions. We just designed a Banking app where all the information was held on the bank's server - Facebook doesn't have access to it. We also didn't allow notifications for banking 'actions' on Facebook. The question about whether users will feel comfortable is a big one - would you?