Deloitte Interview Question

If SOAP is more secure than REST then why many banking application still uses REST?