[marssaxman]

My bank has a similarly unhelpful approach, but at least the SMS code expires, and my phone never sees my bank password at all.