Online banking protection only works if a banking trojan is already on the system = preinfected.
Online banking protection ≠ some kind of generic online banking protection (but unfortunately, that is what the vast majority of users think it is).
It takes a combination of browser protection, data isolation, network encryption, cookie protection, blocking of malicious installs, etc to provide an "all-around" banking protection.
Read the MRG test report carefully...