Firefox simply does not respect firstdirect's wish to hide the addressbar, which doesn't mean they're not trying.

Safari obeys their wishes fully.

Run this in JS console before clicking "Internet Banking"

    window.open = function(){console.log(arguments)}

and you'll see:

    ["/1/2/pib-service", "pib", "toolbar=0,location=0,directories=0,status=1,menubar=0,scrollbars=1,resizable=1,width=780,height=510,top=0,left=0"] 

Note "toolbar=0,location=0,menubar=0" which is a quite strong attempt to hide all window chrome.