You log into your bank directly and then grant access to Stripe.

I presume, behind the scenes, your bank gives Stripe a single application token (not your credentials) to pull read-only data.

(edit) But this is only for banks supporting Oauth, it seems for others it DOES give Stripe your credentials.