Actually OTP hardware devices are a proper solution to this, but banks are mostly deprecating them, unfortunately.
banks and gov sites say it's because of security, but accept SMS. so we know what it's really about
I still hate it, but can't do much about it.