I don't know why, this reminds me of Singapore Airline's account login/signup flow. It's cringy to think that the only allow 6 numbers for their password field. Yes, in 2018!
On that note; any recommendations for Aussie banks that have a secure and modern interface?
I love that they're relatively modern for Australian standards (fast payments, no fees ever, basically) so i'd love to endorse them, but i, too, am on the lookout for a replacement bank that has e.g. MFA with TOTP or a physical challenge-response box like my otherwise overpriced ABN bank account gave me back in 2002, in the Netherlands...
So i, too, am all ears for recommendations.
EDIT: and once you're in internet banking, you can willy nilly transfer cash out if you either use a "saved address" (someone you've paid before) or you'd need to hijack my mobile number. But $deity knows that's easy - just claim you own a number and get it ported over to a new service no-questions-asked. Facepalm, really.
Lots of their app functionality is now handled through AWS from what i've heard.
Then again...someone complacent enough to get that far behind in infrastructure probably doesn't have any chance of that being thought of/appoved.
I see you've worked in the enterprise? :-)
Another reason is that nobody knows how it really works. The people who knew have long retired. The fear is updating it will likely introduce subtly new behavior and new bugs that everyone is scared of touching it.