[stefan_]

You will find there is often a big difference between logging into the account and making any change or transaction. Getting the password right might give you account details and some basic transaction history, but it won't allow you to transfer money without 2FA.

[pancrufty]

True, but you assume 2FA is implemented correctly and doesn’t have a bypass. What I’m saying is that they’re often poor at what they do, so I don’t put excessive trust in them.