I’ve thought of doing pen testing (later on in my career), but I’ve come to realize that it is better if users just started using privacy-respecting FOSS software like Signal, because if you give a hacker enough time, patience, and the right resources, they could hack into anything.

Your idea of pentesting is so far from what it looks like in reality that it’s probably not a path for you, at least not now. Let me explain: how am I going to protect my banking app using Signal? How will I know if our JSON unmarshalling library used by transaction service isn’t vulnerable or exploitable? What FOSS software shows me live dashboards of deployed software in container and their security risk?

everybody still needs them and they’re not going away any time soon.

Bank is civilization old concept, it has always been here and will be. Banks are so durable, they will run after our civilization ends.