Except some systems, such as PayPal, determine authorization to a bank account by making a couple of small transactions and requiring you to confirm the amount. So read-only access to statements does allow you to get more access to the account via other parties. (I found this out after someone I gave read-only access on my account started making withdrawals via PayPal.)