1. They insist on using voice menus that are only ever capable of servicing requests that I can already do online, or don't work because they're jammed up by the same backend issue that their website hits.
2. They try to auto-enroll me in Voice ID despite always going out of my way to demand that feature not be enabled.
3. Use TOTPs sent to SMS instead of any halfway reasonable TOTP/FIDO2 solution.
US Banks are a joke. So much so that I actively root for them to be hacked so a light can be shone on the fact that my god damn Xbox account is far more secure (first line security) than my Bank account (I do realize that Schwab will probably make me whole faster than Microsoft would in the case of some act of God compromise).