[jlokier]

Even when using the web, some of the banks' websites require a step that involves your phone.

The phone app is effectively used as a hardware security token.