[cynicalsecurity]

Good point. They don't. Huh, that's really worrying. My bank started requiring phone for web portal only about a few years ago. They don't allow to use an alternative MFA method. This should be made illegal.

[beej71]

It should be. How screwed are you if you lose your phone?

[wartywhoa23]

Don't fret, the govt has this covered: RFID chip up the ass to the rescue!