In some countries, like at least Norway, you sign these loans with what is called BankID - it is essentially used for all kinds of e-signing, it's probably the most used 2FA tool here. Probably other Scandinavian countries too.
But back to my point - if you for whatever reason get compromised to such a degree that other people can sign off things with your BankID, you're basically completely fucked. At least for probably 99.99% of the cases.
This is because the law recognizes that sign-off as if you did it. And if some other did it, you've breached the ToS - which more or less states that you, and you only, can know the password, and it is your responsibility that said password is hidden / unavailable to others. Your signature and confirmation, your loan.
The most common victims of these cases are spouses and close family members.
But again, these things do differ from country to country.