gtkspert
Account compromise is one threat, but the use of valid accounts for money laundering is another. In my view the reason they "get it wrong" is because they don't want you to be able to automate transactions, as that makes money laundering easier...
Therefore, they don't want to use standard TOTP because that's easy to automate. Requiring SMS based 2FA is harder (but not impossible, use a modem or maybe a SMS service.) And requiring a special app is quite difficult to automate.
I really just want a bank account with an API, that would be so, so nice.
Best Buy use them as price tags: https://www.youtube.com/watch?v=7aVoeDC-7MA
Failure to isolate (lock-out) puppet from switching things back on during a migration.
Best I can find is prohibitively expensive, especially if I wan't to stream 4K content...