The problem is they usually allow 2FA through their app. I am not sure if this is the case for OP, but it is for most online banks. Luckily my bank still provides a physical authentication device.
I'm always amazed how all the banks I've used in Australia require either their own proprietary app or some bizarre closed source unvetted 3rd party TOTP implementation instead of just allowing TOTP.