As someone who uses the bank being referred to in the OP, this makes me feel a little better... somehow. I use a unique password and 2FA and monitor my accounts but I am still considering switching banks to one that puts more emphasis on security.
You mentioned that only a few banks have the resources to tear down their systems and create a new secure one. What banks are these?