[razemio]

How can you trust any mainstream "working" iPhone or Android device? You already mentioned open source android distros. You mean those where no banking or streaming device app works because you have to use a replacement for gapps and the root / open bootloader prevents any form of DRM? That is not really an option for most people. I would love to have a Linux phone even with terrible user experience as long as I do not lose touch with society. That however seems to be an impossible task.

[warkdarrior]

You don't trust Apple's and Google's mobile phones. And some bank doesn't trust open source android distros on mobile phones. Those are both fine positions. You are free to move to another bank, just like the bank is free to not accept you as a customer.

[tempworkac]

I'm curious what functions other than maybe depositing a check requires a banking app?

[tredre3]

When I'm in Canada I often transfer money (interac e-transfers). I always use the website, even on mobile, but the website has some arbitrary limits than the app does not. For example I can only transfer $1,000 at a time, the app allows $10,000. There's also a limit of recipients per day.

My charitable interpretation is that the app allows a greater verification process so the bank trusts it more and it's "to protect me, the user". But then, the website lets me transfer $100,000 using a multitude of other methods if I want (wire, e-check, create carrier check), so... yeah.

[bitdivision]

Depends where you live. In the US, probably not much, but in other countries where transfers are ubiquitous, being unable to use a banking app could be a real problem.

[tempworkac]

are there really countries where the bank doesn't have a website you can use to do a transfer, but you could do it through an app?

[bitdivision]

I don't know, though certainly the experience is a lot simpler without the 15 minute timeout, painful login, and extra security checks I see on web banking.

Edit: Not to mention that many of the newer banks don't even have web banking. It's app only. Of course, its your choice to open an account there though

[solarkraft]

In Germany and I think the whole EU 2 factor authentication is mandatory, for which the favored implementation is an app. SMS TAN is out, the alternative is a secondary device you stick your card into.

[Dylan16807]

Do you need a proprietary app for that? TOTP is fine, you can just pick your own.

[TeMPOraL]

Haven't seen a bank offering software TOTP in Poland. Over a decade ago, before smartphones became ubiquitous, I've seen a bank offering a physical TOTP device. These days, as far as I've seen, it's either SMS codes or single use codes on a physical scratch cards (haven't seen one in 5 years, though), or in-app confirmation.

[solarkraft]

Yes and they tend to be shoddily programmed security theater. My bank makes me use SecureGo plus, which goes as far as redirecting you to a website telling you screenshots aren’t allowed when you try to document its latest glitch (which may be another misguided “security” feature, who knows).

[razemio]

In Germany you can use the website BUT you still need the app for 2fa. SMS is no longer an option for most banks, because it is considered insecure. Same goes for TOTP since this can easily be replicated, if you have access to the device generating the TOTP.

[sbuk]

No, but there are bank accounts that are app only. Monzo in the UK is a popular example.

[Eavolution]

Bank transfers, online purchases (most banks reqire 3DS now and usually won't let you buy things online without the app on a phone), some don't have a web interface, and others if they do require you to approve the login to that from the app