I hate that baks require the phone app, where transactions don’t also require a computer: It enables racket where my aggressor can list my bank accounts; It also reduces the 2FA to 1FA (phone-only transactions with password + fingerprint + SMS only on the phone).