AFAIK if I use a bank app on an insecure phone, and they stole my money, the bank should give it back to me. Authentication is their job after all.

But it is not much of as a problem right now. They definitely try to push people towards more secure and up-to-date systems, but as now, you still can bank from insecure systems as well, and allow your account to be stolen.