So what's stopping anyone from downloading the phone app and getting your BankID and 2FA code? Is there a verification process to be able to use the app?
I wonder if I or, more likely, someone else could write a GreaseMonkey script that would turn all these obscure abbreviations into explanatory tooltips.