Here /Europe/ some banks are starting to require the use of mobile apps for authenticating transactions, instead of providing hardware tokens.

When I ran into this problem they told me: "either pay us X EUR/month extra for Business Banking or, no hardware token for you". Calculated that (X * 12) < (cost of cheap Nokia Android phone), and got the latter which I keep in flight mode in a desk drawer and use for the banking app only.

Government apps no - both require a 'modern' Android or iPhone.

Banking apps partially - I can't use the web browser on my phone (it doesn't support modern enough crypto) but I can use the web browser on my laptop. Mostly it's that I've not been able to try any of the online-only challenger banks ;)

For track and trace at least, it relies on the Google and Apple contact tracing APIs.