[wryun]

I imagine that from their perspective, they're trying to decrease overall fraud, not cater to individual preferences. They probably see (or imagine they see) more fraud attempts coming via email than SMS due to insecure email accounts; as you say, "I appreciate not all Ally's customers are technically capable of setting up their email in this way...".