Why am I asked to perform additional validation steps when adding my external accounts?

The bank that you’re trying to add doesn’t recognize the aggregator requesting your account information (just like when you log in for the first time on a new or different device).  To ensure security, it will require “step-up” authentication, which can include the code from a text message, or answers to personal security questions.