Most of them have an SMS option now. Bank of America offers the token or just one-time-use SMS'd security tokens.
Being forced to pay a small fee (by your phone-service provider) to log in isn't much better, I think.
It's easy to negotiate to get them for free when you have any amount of leverage on the provider, but out of the box you pay.