Also why would you use internet banking for your primary bank account its just increasing your attack surface.

I only have internet banking enabled for my secondary account (which has 2fa) which never has more than £100 in it and I only did that so I could xfer money to my p2p account.