Hacker News Reader

I think EU regulation kind of force the banks into app usage as 2nd factor

Yes, they're required to move to apps with device and app integrity checks. SMS 2FA is temporarily permitted for the transition period.