Building on Plaid? Here's what US fintech teams actually need to secure — token handling, compliance gaps, and the mistakes that surface during audits.