> No Email or TOTP? (No, I am not suggesting sms)

Nope. And accessing the website/online banking portal is not allowed without going through the smartphone app 2fa too.