BOQ forces me to use a specific non-standard (Symantec) app on my phone as 2FA, which I also find stupid, especially since I can just call them on the phone and they'll reset it for me. What's even the point?