This is a great example of when privatization is a bad idea. Fraud is clearly a loss for the society, but the banks couldn't care less. A more secure solution would cost more for them, and it's someone else who has to carry the burden.
Fortunately, BankID doesn't fulfill the EU's security requirements, so Sweden finally has to make a proper eID, despite the bank-friendly politicians (Sweden is very "pro-business") not wanting to.[2]
[1] https://www.svt.se/nyheter/lokalt/uppsala/filippa-lurades-av...
[2] https://www.sweclockers.com/nyhet/37412-statlig-e-legitimati...