I can wire my entire bank account away without any 2FA with online banking. My bank just started doing SMS verification for new devices but that's still not really enough. Like just get on the TOPT train and leave it alone.
Not even a TAN?
I believe some banks have 2FA. My bank's app will require me to setup SMS verification by October. A little late, but better than never I guess
I think you need to change banks.
Yes. I didn't really consider that. I was thinking more along the lines of an expiring token. If you had to punch it in, someone who came around and Thermanator'd it would always be too late.