Deloitte interview question

If SOAP is more secure than REST then why many banking application still uses REST?