> No idea how they arrived to this retarded architecture

2FA is known to increase security drastically. It's easy to understand why it's a good idea.

EU banks in particular do this because 2FA for banks is mandated by a EU level directive.

> Submitting any kind of architectural feedback to a bank is hopeless and helpless, these fuckers always know better.

In this case they clearly do.