> To me, this violates a fundamental assumption of banking. If someone takes your money without your consent, you typically have recourse through customer service (often works) and the legal system (almost always works, but costly). This fundamental assumption was thrown away overnight without informing anyone about it.

Yes. Which is why I won't use Zelle or PayPal with an account connection.

A friend runs a bank branch. She had four clients in one day who'd been scammed. Some despite SMS 2FA. Someone had convinced a cellular provider to issue them a new SIM card for an existing number.