If a bank uses SMS to confirm operations and doesn't check that card was recently reissued then this attack would work against traditional bank too.
With crypto the government can't get involved so you're screwed
My debit card is capped at $400? Cash a day. So cool you get $400 if you steal it. Very different from 100k
Spending 100 crypto coins? Not so much.