@b_t_walsh @SwiftOnSecurity In the context of a bank, I'd be happy for them to offer TOTP or U2F in the first place, rather than relying solely on SMS or making you lug one of their dongles/card-readers around