Bank wants to verify he didn't borrow the money. Yes, they can require that. You
don't have to share, but he'll have to find another lender, though someone may be able to get the underwriter to be reasonable, if acting a little too strict. OTOH, may be banks policy.