[m4rtink]

Doesnt that force people to not only use smartphones, but "approved" smartphones (read Android/iOS) with locked bootloaders and no root access (or the bank authenticator app will refuse to run)?

[PeterisP]

A dedicated 2FA token (yubikey, or many other brands) is also a reasonable option, and many systems support these standards (U2F/FIDO2).