I work in german FinTech too and am very familiar with this game. Forcing developers to do 2FA for "every keystroke" while running ancient software on historic OS doesn't make much sense to me.