It’s not really a security concern, but SMS is only one factor (and EU regulations require banks to ask for two).

SMS fees outside the US are also orders of magnitudes higher – paying a few cents for that can make the entire transaction uneconomical for banks, since interchange rates are also heavily capped in Europe.