Don't blame the EU just yet.
1. EU didn't force the banks to use SMS
2. EU is aware of the privacy/security issue of SMS and is planning to actually ban using SMS otp as a form of strong auth
https://www.zdnet.com/article/german-banks-are-moving-away-f...