It’s a small victory for financial privacy against escalating surveillance.