> The way to authorise online transactions is with a piece of paper with 100 codes printed on it (TAN list). This was a shock, but it's apparently common here.
Well whoever can hack your password, mobile TAN or TAN reader device will likely still not hack into your paper TAN list. There's something to be said for a "physical layer".