> Or one is living in a country where all banks require a phone as the second factor for authentication.

A cheap smartphone left at home and powered on occasionally to log into the bank's website should be enough for this. No cell plan, just WiFi. If you want to carry a cell phone and actually use it, I would suggest a degoogled Android ROM. By cutting out Google, privacy is significantly increased.