Ask HN: How can we improve web banking security for the better?

Pages like the dongleauth.info banking page [1] make for bleak reading. Every bank I have an account with requires some sort of 2fa by now. With all of them, it only ever comes with their own custom „security app“. Those in turn are typically nothing more than an opaque totp implementation that does not allow the end user access to the psk. How can we, the technologists of this society change this in favor of open protocols? Sure everybody here has multiple Android and iOS devices but are we really ok with being required to have one of those in order to be banked?

[1]: https://www.dongleauth.info/#banking